蜜罐检测系统与IDS的结合应用

随着网络入侵类型的多样化发展，入侵检测系统IDS作为防止黑客攻击的一种主要手段，日益显示出其在构建方法、检测效率、可移植性和可升级性等方面存在着普遍的缺陷。蜜罐技术的设计可以让黑客入侵，借此收集证据，同时隐藏真实的服务器地址，这样可以弥补与改善IDS在设计上被动性的不足，为提前发现新的入侵检测规则提供有效的信息。蜜罐不直接给网络安全带来帮助，但它能收集和攻击者相关的攻击信息并分析这些信息，以此来研究攻击者和被蜜罐模仿的系统的漏洞，从而间接的为网络安全带来帮助。

The Application of Combining Honey pot Detection System with IDS

With the diverse development of network intrusion, as the main means against attacks by hackers, Intrusion Detection System （IDS） has increasingly shown its shortcomings in building methods, detection efficiency, portability, scalability, and so on. Honey pot technology is designed to allow hackers to attack to collect evidence, at the same time to hide the true address of the server, which can make up for the designing defects of IDS to provide effective intrusion detection. Honey pot is not directly helpful for network security, but can collect and analyze such attacking information in order to study the attacker and the loopholes in the system, thus indirectly bring security to the network.