Study on active solution for entrapping worms based on dynamic IP address
HE Jian-min · Jisuanji gongcheng yu sheji · 2009
To solve some problems such as low worm trap capacity and big resource-consuming,the current honeypot and darknet monitoring technology is studied,and a new active worm trapping solution is proposed. With the help of dynamic honeypot IP and the capability of network service vulnerability which can respond to the worms attack rightly,it responds to the scan and completes the high interaction with the worms. Instead of traditional simulating the behavior of network service vulnerability,the burden of studying the principle of vulnerability is much less. The experimental results show that the principle is feasible and this prototype system can play a role in the predicting worms.