| With the wide application and the increasing network economy, the security of network becomes more and more outstanding. In so many network security accidents, the damage by worm becomes more and more serious. A large number of researches were done to find how to detect and prevent network worm and many technique projects were developed, but most of all these projects require a lot of network resources. However, many small networks or personal networks in Internet environment are unable to offer a lot of resources. Therefore, it becomes a very important research issue how to realize a system allowing users to detect worm and defend themselves with a small quantity of resources.Firstly, actual conditions of current network security technique and network worm's development were analyzed in the beginning of this paper, according to the essential principle of network worm, currently existent techniques detecting and preventing against worm were further researched and summarized. Meanwhile, according to the research and analysis of basic principle and relative technique of honeypot, it can be seen that honeypot techniques is a kind of good security technique which can capture worm samples, investigate the characteristic of worms and restrain the worms from bursting.Next, in this paper two typical existing worm-detecting systems based on honeypot techniques were analyzed. Their improvements in small network environment were studied through summarizing their respective characteristics. And then aiming at the feature of small network environment, a worm-detecting project based on honeypot techniques was presented. The detailed design idea, the frame and the work process of this project were also given. And its applicability was studied further.Finally, the project was verified and tested with experiment. According to the experimental result and its contrast analysis, it was approved that the project was effective and reliable for worm-detecting in small network environment. |
PDF Full Text Request