The asymmetry of network attack and defense has troubled security defenders for a long time, and the defensive deception technology evolved based on honeypots provides a new idea for solving this problem. The basic idea is to make the attacker misperceive the attack, which increases the cost of the attacker’s invasion. At the same time, it allows the defender to track and analyze the behavior of the attacker, and make judgments about the attacker’s intentions, thereby blocking the attacker’s way forward one step ahead, and making the balance of network attack and defense tilt toward the defender. People who don’t know this technology generally have the impression of honeypot technology, which is not conducive to the development of this technology. In order to let everyone know more about this technology, this article is written, and we hope this article can serve as a reference for future research. First of all, this article introduces the defensive deception technology, then sorts out the development process of defensive deception according to the time axis, summarizes the existing technologies according to the classification method of defensive deception environment construction, and finally introduces the current market based on the application of this technology, and talk about the future development of this technology.

错误:搜索内容不能为空,请输入英文关键词
错误:关键词超出字数限制,请精简
高级检索

A Survey of Defensive Deception Technology Based on Application Level

  • Ningning Chen,
  • Le Wang,
  • Xiaoxin Lin,
  • Anxue Yin,
  • Fan Li

摘要

The asymmetry of network attack and defense has troubled security defenders for a long time, and the defensive deception technology evolved based on honeypots provides a new idea for solving this problem. The basic idea is to make the attacker misperceive the attack, which increases the cost of the attacker’s invasion. At the same time, it allows the defender to track and analyze the behavior of the attacker, and make judgments about the attacker’s intentions, thereby blocking the attacker’s way forward one step ahead, and making the balance of network attack and defense tilt toward the defender. People who don’t know this technology generally have the impression of honeypot technology, which is not conducive to the development of this technology. In order to let everyone know more about this technology, this article is written, and we hope this article can serve as a reference for future research. First of all, this article introduces the defensive deception technology, then sorts out the development process of defensive deception according to the time axis, summarizes the existing technologies according to the classification method of defensive deception environment construction, and finally introduces the current market based on the application of this technology, and talk about the future development of this technology.