一种基于双层动态蜜罐技术的TCPS主动防御方法.DOC

基于双层动态蜜罐技术的智能交通网络主动防御方案* 王超杰2，黄宇达2，赵红专1，王迤冉3 (1.重庆大学 自动化学院，重庆 400044;2.周口职业技术学院 信息工程系，河南 周口 466000；3.周口师范学院 计算机科学与技术学院，河南 周口 466000） 摘要：针对智能交通网络恶意入侵不断升级，手段层出不穷，更新周期不断缩短传统防御手段对未知入侵或其变种却无能为力文章通过分析智能交通系统的安全问题和特点，借鉴FSM动防御系统模型和P2DR自适应网络安全模型的优势提出一种基于双层蜜罐技术的智能交通系统主动防御方案该方案分层布设产品型和研究型蜜罐，产品型蜜罐拦截包括未知入侵或者其变种的入侵，并将其转入研究型蜜罐；研究性蜜罐对入侵进行分析，提取攻击源信息，实现保护智能交通系统网络及为公安机关提供入侵违法犯罪证据的目的。TP393.08　文献标识码：A Active defense scheme of intelligent transportation system based on the double dynamic honeypot technology WANG Chao-jie2, HUANG Yu-da2, ZHAO Hong-zhuan1, WANG Yi-ran3 ( 1.ChongQing University，College of Automation，ChongQing，400044；2. ZhouKou Vocational and Technical College，Information and Engineering Department，ZhouKou， HeNan，China，466000;3. Zhoukou Normal University，College of Computer Science and Technology，ZhouKou，HeNan，China，466001)Abstract: For the existing problems, such as malicious intrusion against Intelligent Transportation Network System escalates, intrusion methods continuously upgrade, update cycle becomes shorter,and the traditional defense methods are based on known invasive species, but they cant process the unknown intrusion or its variants, and so on,This paper through the analysis of ITS security problems and characteristics, draw lessons from FSM active defense system model and P2DR adaptive network security model, based on the advantages, put forward a active defense scheme of intelligent transportation system based on the double dynamic honeypot technology, this scheme hierarchical arrangement of product type honeypot and research type honeypot, product type honeypot head off unknown intrusion or its variants, and convert it to research type honeypot; research type honeypot analyzes the intrusion, extracts attack source information,thus realize to protect ITS network and provide evidences of invasion crime. Keywords: intelligent transportation systems(ITS); unknown intrusion; dynamic honeypot; active defense；honeyfarm 0 引言 智能交通系统由专用短程通信(DSRC)，车辆和道路设施(包括传感器)等部分组成，各部