The Research On Honey Pot Software Honeyd

Honeypot is a resource , whose function is intended to beattacked .Honeypot can not give network security the help directly ,itjust collect and analyse the information of attack to research attackerand leak of imitated OS by honeypot ,so give network security the helpindirectly .Honeyd is a light, Low-Involvement Honeypot .It can solvethese problem: the higher Level of Involvement honeypot is ,thedangerer honeypot will be;the problem of fingerprint, How can Honeypotbe disposed distributly .This thesis researched the structure of Honeyd ,incloud the functionof logic module ,how concerted all modules are;The course of dealing data;especially the course of dealing TCP/UDP/ICMP data;The coderealize.Bring forward the method of alluring and detecting network wormby Honeyd on the base of researching result.It is feasible to using High-Involvement Honeypot to allure and detectnetwork worm ,But the cost of the method is too high ,the effect is notideal .this thesis bring forward a method that using Honeyd to allur anddetect network worm ,and Combine from discussed its possibilitytheoretically. At last ,Using a example of alluring and detecting "chongjibo " ,prove it。...