Research On Anti-worm Model Based On Hybrid Honeypot Technology

As the internet has brought convenient and fast, various security issues have also followed. Specially the network worm gives people a lot of trouble. Although much research has been done to how to efficiently detect and prevent network worm ,and security systems such as firewall,network intrusion detection system and virus defending system have been developed,all these systems can do nothing when a new-style worm arises. The presence of honeypot technology try to change the passive situation of traditional network security.Firstly,this paper analysed the definition of network worm ,struction of network worm, infection strategies and detection technologies. Secondly the definition of honeypot and the advantages and disadvantages of honeypot are introduced.Thirdly this paper also introduced the architecture of third generation honeynet.Afterward,this paper analysed software of honeyd and capturebat. Finally,a model of anti-worm based on hybrid honeypot technology was presented.Actual design of implemention are given based on the new idea,whose component include the modules of trick service,detection service, analysis service and anti-worm service. Finally the model was verified and tested with experiment.According to the experimental result,it was approved that the model was effective and reliable.At the end, this paper points out the direction to further the research and forecasts the prospect of future.