Research and analysis of mixed honeypot
一种混合型蜜罐的研究与分析*

In view of tradition honeypots have difficulty in balance between interaction level and security,this paper proposed a hybrid type and high pretended honeypot. The model was composed of trap system and fictitious service system. Trap system configured dynamically high interaction honeypot with weak system in order to tempt attacker, then it used redirect technique to lead invasive data stream into a high pretended honeypot system, and it also deployed honeywall to control data and capture data. The result of technical specification analysis shows that this model has a higher interaction level and better fraudulence as a whole.