北京邮电大学学报

  • EI核心期刊

北京邮电大学学报 ›› 2015, Vol. 38 ›› Issue (5): 47-53.doi: 10.13190/j.jbupt.2015.05.008

• 论文 • 上一篇    下一篇

CHoney:一个面向Cisco路由器攻击捕获的新型蜜罐

刘胜利, 彭飞, 武东英, 邹睿, 肖达   

  1. 信息工程大学 数学工程与先进计算国家重点实验室, 郑州 450000
  • 收稿日期:2015-01-14 出版日期:2015-10-28 发布日期:2015-10-28
  • 作者简介:刘胜利(1973—),男,副教授;彭飞(1989—),男,硕士生,E-mail:pengdaxian1011@126.com.
  • 基金资助:

    国家科技支撑计划基金项目(2012BAH47B01);上海市科研计划项目(13DZ1108800);国家自然科学基金项目(61271252)

CHoney: a New Honeypot for Capturing Attacks Against Cisco Routers

LIU Sheng-li, PENG Fei, WU Dong-ying, ZOU Rui, XIAO Da   

  1. State Key Laboratory of Mathematical Engineering and Advanced Computing, Information Engineering University, Zhengzhou 450000, China
  • Received:2015-01-14 Online:2015-10-28 Published:2015-10-28

摘要:

从提升网络安全性的目的出发,设计实现了一个Cisco路由器蜜罐CHoney,用于检测针对Cisco路由器的攻击. CHoney使用函数监控和数据追踪等方法来收集攻击者的信息,并根据攻击者不同的敏感操作分别设定报警规则. 经过实验测试发现,CHoney可以及时捕获针对Cisco路由器的攻击,并支持对攻击过程的分析和攻击代码的提取. 实验结果表明,CHoney对于Cisco路由器的攻击检测是有效的,可以有效的提升网络的安全性.

关键词: Cisco路由器, 蜜罐, 网络安全, 攻击检测, CHoney

Abstract:

For purpose of improving cyber security, a honeypot named CHoney used to detect attacks against Cisco routers was designed and implemented. CHoney uses function monitoring and data tracking to collect information about attackers. It sets up alarm rules based on different sensitive operations of attackers. Experiment shows that CHoney can promptly capture attacks against Cisco routers, support analysis of attack process and extraction of attack code. CHoney is effective in detecting the attacks against cisco routers, and improves the cyber security through experiment.

Key words: cisco router, honeypot, cyper security, attack detection, CHoney

中图分类号: