Research on Intelligent Dynamic Honeynet Technology for Power Industrial Control System
Fei Xiao, Zi Wang · 2023
In the integrated development of informatization and industrialization, industrial systems and networks as key protection areas of infrastructure are facing network attacks and unknown threats. At present, the traditional static passive defense and dynamic active defense measures of power network are always facing new challenges. To solve this problem, this paper proposes a heterogeneous and reconfigurable industrial network deception trap defense environment model. On this basis, DPDK technology is used to optimize interrupt response and reduce system kernel overhead. The method also introduces quantitative and qualitative evaluation indicators of honeynet effectiveness to analyze the income of attack and defense within the network The model can adaptively and dynamically deploy deception and trapping environment. The research results show that compared with static honeynet, this method can improve its flexibility, security, trapping rate and adaptive ability to actively counter threats.