The paper presents a distributed honeypot system CPot(Click-based honeyPot) which fuses network telescope and intrusion detection.The author deploys CPot in a virtual digital library which is connected to public network, and carries out half a year of test in library security system. The result proves that CPot can increase the security of digital library and has a high practical value in library security.
朱晓东. CPot蜜罐系统在图书馆网络中的应用[J]. 现代图书情报技术, 2011, 27(2): 94-99.
Zhu Xiaodong. CPot Honeypot System in Library Network Applications. New Technology of Library and Information Service, 2011, 27(2): 94-99.
[1] Spitzner L. The Honeynet Project: Trapping the Hackers [J]. IEEE Security & Privacy,2003, 1(2):15-23.
[2] Spitzner L. Honeypots: Tracking Hackers [M].邓云佳译.北京:清华大学出版社,2004.
[3] Zhuge J, Holz T, Han X, et al. Collecting Autonomous Spreading Malware Using High-Interaction Honeypots .In: Proceedings of the 9th International Conference on Information and Communications Security.Berlin, Heidelberg:Springer-Verlag, 2007:438–451.
[4] Moore D. Network Telescopes: Observing Small or Distant Security Events . . http://www.caida.org/publications/presentations/2002/usenix_sec/.
[5] Kohler E. The Click Modular Router . . http://www.pdos.lcs.mit.edu/papers/click:kohler-phd/thesis.pdf.
[6] Müter M, Freiling F, Holz T, et al. A Generic Toolkit for Converting Web Applications into High-Interaction Honeypots . . http://people.clarkson.edu/~jnm/publications/honeypot-raid2007.pdf.
[7] Vrable M, Ma J, Chen J, et al. Scalability, Fidelity and Containment in the Potemkin Virtual Honeyfarm . In: Proceedings of the 2005 Symposium on Operating Systems Principles. New York, NY, USA:ACM,2005:23-26.
[8] Jung J, Paxon V, Berger A W, et al. Fast Portscan Detection Using Sequential Hypothesis Testing . In: Proceedings of the IEEE Symposium on Security and Privacy, Berkeley, California,USA. 2004: 211-225.
