Research On Malicious Web Detection Based On Honeyd

Accroading to the rapid development of network,the operational capacity ofcomputer services have been developed from single computer to all theinternet.Network has become an important part of social life.However,because ofthe diversity of the internet,the wide distribution of terminals and the openness of thenet,the network is vulnerable to suffer man-made attacks,which bring loss to all thesociety. Malicious Web is one of the most common attacks.Attackers use a varity ofways including virus and botnet to attack a large number of computers.Malicious Webhas a great threat to network security.Besides the firewall and intrusion detectiontechnology,honeypot is an excellent technology which is proactive.The role ofhoneypot technology is to lure hackers to scan and attack the network and then thehoneypot can collect the attacker’s information and techniques.In this way,thehoneypot will improve the security of network.This paper presents an architecture that use honeyd to track the maliciousweb.Through the use of honeyd,the ability to capture,analyse and track technologyof malware, we can record the malicious intrusions.Based on the existingexperimental environment,the paper build a system using powerful honeydtechnology to track malicious web and then achieve the system by testing.Focus on the defects that the honeyd is easy to be detected,the paper put forwarda new idea of modifing the configuration of Vmware to enhance theconcealment.Experimental results show the feasibility and safety of this technology.