邪恶八进制信息安全团队技术讨论组's Archiver

EvilOctal 2006-3-9 02:45

[转载]Scalability Fidelity and Containment in the Potemkin Virtual Honeyfarm

信息来源:邪恶八进制信息安全团队([url]www.eviloctal.com[/url])

In this paper, we describe an approach to minimize this tension and improve honeypot scalability by up to six orders of magni- tude while still closely emulating the execution behavior of individual Internet hosts. We have built a prototype hon- eyfarm system, called Potemkin, that exploits virtual ma- chines, aggressive memory sharing, and late binding of re- sources to achieve this goal. While still an immature im- plementation, Potemkin has emulated over 64,000 Internet honeypots in live test runs, using only a handful of physical servers.

页: [1]
© 1999-2008 EvilOctal Security Team