One Kind Of Active Defense System Model Research Based On Honeypot Technology

The 21st century is the computer network high speed development century, but at the same time, the hacker invades rampant day by day, the computer virus is very serious too, this serious influence computer network's normal operation. What is more serious, the cyber war also already appeared in ours life. It has brought a new challenge for the modernized national defense.But these network security product which the firewall, the intrusion detection system, or the latest intrusion prevention system, they independent use is poor in front of the numerous invasions and the virus. Especially in national defense network security domain, which obviously is very poor. Therefore we research and development a good network security product', which has the historical significance.This article has studied one active defense system model based on the honey pot technology, and put the honey pot, the honey net technology and the intrusion prevention system, as a network intrusion prevention module which use to decoy, then cheating hackers, so to find out the steps which hacker attacks and attack attempts. Then again to improve the detection engine of the intrusion prevention system, and improve the function of security and defense systems, and creatively put forward the idea of attacking defense, that is great significance in the network war in the future.In the specific study design, the first, for the traditional intrusion detection alarm rate and the leakage problem of high false alarm rate study. Designed intrusion detection engine based on the genetic algorithm, and then proposed the classification algorithm antigens, through specific simulation and mathematical reasoning proved its effectiveness. The specific active defense system verification and model design, which is based Liaoning Technical University campus network as a simulation object, design a model of active defense system with VB and C + + network programming. In this model, it called a series of network security software for system demonstration. In the last experiment of the paper, it did a large number of network security experiments. This study demonstrated that the active defense system is feasible and effective with specific experimental data.