Pseudo Host Model and Implementation Technology
HE Ju-hou · Jisuanji gongcheng · 2008
Based on the analysis of implementation technology of traditional honeypot,this paper presents a pseudo host model,which is used to build honeypot system.All pseudo hosts share the local host’s protocol stack.By the reflection of the stack,pseudo host implement to send and receive packets.The decoy servers separate from the pseudo host,so the risk of the honsypot system to be intruded is decreased.By dynamic manage IP addressed and the ports in LAN,the decoy server also can apply to the IP address that is assigned to a real host.The scan result shows this model can meet the requirements of the honeypot system.