Research And Implementation Based On VMware In Virtual Honeynet Technology

Honeypot technology is a new emerging technology in recent years, it is one kind of security resources, whose value lies in being scanned, attacked and compromised. Honeynet is a sort of the fraudulent network which developed on the basis of the Honeypot technology. As a network system, honeynet generally consists of firewall, intrusion detection system (IDS), one or more honeypot machines, but it can also be constructed on a physical host by virtual machine softwares. So far it has already experienced from the first generation of honeynet technology, second generation of honeynet technology to the third generation honeynet's development process on the honeypot technology, even presented the large-scale Honey Farm technology. But the honeynet is one kind of new technology, also has the limitations as other new technologies.To realize the honeypot technology,this thesis firstly studies the three key data capture, technologies including follow aspects: data capture data analysis and data control. At last the thesis represents a new method of mutil-level data capture and data control. Combined with the current technology and tools, this thesis has successfully deployed a honeynet system, which meets apart from the data control, the data capture, the data analysis demand. It can effectively fulfill the function of data capture and data control. and it also enables the deployment honeynet's function to obtain the full display. At the same time, when realizing the honeynet system specifically, the system has designed the different storage pattern on the base fully considering the log information's security and reliability, and using bridge's thought to strengthen security of the network management module.