Research On Safe-System Based VM Technology
Yong Li · Computers & Security · 2008
Firstly, the honey-pot and traditional IDS technologies are analyzed in details. Then a new IDS solution called VM-Honey based Intrusion Examine System (IES) is proposed, which integrates the advantages of virtual machine (VM), honey-pot, HIDS and NIDS techniques while efficiently overcoming their defects. It has the features of lower distort and fail-to-report rate, and does better in detecting unknown intrusion behaviors than traditional IDSs. VM-Honey based IES does it best to settle its own security issues and needs hardly modifying current IDSs, therefore it is practical and has good application prospect.