| A New Honeynet Model |
| |
| 作者姓名： | TIAN Junfeng LIU Yongli |
| |
| 作者单位： | Institute of Network Technology, Hebei University, Baoding 071002, Hebei, China |
| |
| 摘 要： | Based on citing Realm, a new Honeynet Model-BRHNS （Based Realm Honeynet） is presented. BRHNS makes use of cooperation between Realms, the efficiency of Honeynet is improved, in intrusion behavior analysis module, unknown attack data are classified by unsupervised clustering algorithm, accordingly, prepared for extracting intrusion rules and adding the new rules to IDS rule-lib, consequently, the detection efficiency of IDS is improved and the workload of Honeynet is effectively reduced. Had performed experiments through cross-validate, we found it was effective to classify the attack data by unsupervised clustering algorithm.
|
| 关 键 词： | 网络安全 诱陷 蜜网络 区域 数据分析 |
| 文章编号： | 1007-1202（2006）06-1835-04 |
| 收稿时间： | 2006-03-20 |
A new Honeynet Model |
| |
| TIAN Junfeng LIU Yongli.A New Honeynet Model[J].Wuhan University Journal of Natural Sciences,2006,11(6):1835-1838. |
| |
| Authors: | Tian Junfeng Liu Yongli |
| |
| Institution: | (1) Institute of Network Technology, Hebei University, 071002 Baoding, Hebei, China |
| |
| Abstract: | Based on citing Realm, a new Honeynet Model-BRHNS (Based Realm Honeynet) is presented. BRHNS makes use of cooperation between Realms, the efficiency of Honeynet is improved, in intrusion behavior analysis module, unknown attack data are classified by unsupervised clustering algorithm, accordingly, prepared for extracting intrusion rules and adding the new rules to IDS rule-lib, consequently, the detection efficiency of IDS is improved and the workload of Honeynet is effectively reduced. Had performed experiments through cross-validate, we found it was effective to classify the attack data by unsupervised clustering algorithm. |
| |
| Keywords: | network security entrapment Honeynet realm data analysis |
| 本文献已被 CNKI 维普 万方数据 SpringerLink 等数据库收录！ |
|
