[转载]Scalability Fidelity and Containment in the Potemkin Virtual Honeyfarm

信息来源：邪恶八进制信息安全团队（www.eviloctal.com）

In this paper, we describe an approach to minimize this tension and improve honeypot scalability by up to six orders of magni- tude while still closely emulating the execution behavior of individual Internet hosts. We have built a prototype hon- eyfarm system, called Potemkin, that exploits virtual ma- chines, aggressive memory sharing, and late binding of re- sources to achieve this goal. While still an immature im- plementation, Potemkin has emulated over 64,000 Internet honeypots in live test runs, using only a handful of physical servers.