The Research And Design Of Virtual Honeynet System

Honeynet technology is valued by the network security, and be used in many areas. Honeynet could lure intruder's attack by using a seemly vulnerability so that we could study their attack motive, method and tools, especially that of new unknown attacks.Firstly, the basic concept, characteristic, core function, security value, application areas and security risk are on the paper. Then we introduce the architecture of honeynet, then analyse the changes of the architecture of honeynet in data capture and data control.Secondly, we deeply research and discuss the virtual honeynet technology and kernel level captures technology. Using virtual honeynet technology could make all the honeynet running in one host, and using kernel level capture technology could capture the information before encryption.Based on deeply researching in honeynet, we design and implement a virtual honeynet system, include the framework and network topology, prove the security, usability, validity and reliability of the virtual honeynet system by testing.We capture an attack in real environment using the virtual honeynet system, and analyze the attack from the motive, method and ability of the intruder.Finally, some advices on how to improve the existing virtual honeynet system are put forward.