[转载]Scalability Fidelity and Containment in the Potemkin Virtual Honeyfarm
信息来源:邪恶八进制信息安全团队([url]www.eviloctal.com[/url])In this paper, we describe an approach to minimize this tension and improve honeypot scalability by up to six orders of magni- tude while still closely emulating the execution behavior of individual Internet hosts. We have built a prototype hon- eyfarm system, called Potemkin, that exploits virtual ma- chines, aggressive memory sharing, and late binding of re- sources to achieve this goal. While still an immature im- plementation, Potemkin has emulated over 64,000 Internet honeypots in live test runs, using only a handful of physical servers.
页:
[1]