A Deception Defense and Active Defense Based Three-Dimensional Defense Architecture: DA-3DD Design and Implementation Plan
Yizhen Sun, Xiaotao Peng, Zheng Tian, Shaoming Guo · 2019
With the development of network technology, security attacks against IoT and the industrial Internet havebecome more covert and diversified. However, the traditional network security defense means can only aim at a single attack, and can only intercept or defend passively, which can't deal with the complex security protection forms of IoT and industrial Internet. Therefore, this paper proposes a three-dimensional defense architecture-DA-3DD based on deception defense and active defense and provides an implementation scheme. The structure of DA-3DD is simple and easy to realize. While integrating traditional network security protection means, two honeypot systems, Information Collection Honeypot and Reverse Honeypot, are designed additionally, which overcomes the disadvantages of passive and low coverage of traditional honeypot protection system. Finally, the whole architecture realizes active, all-round and three-dimensional network security protection, which provides a new idea for the design of similar security protection system.