A Survey of Defensive Deception Technology Based on Application Level
摘要
The asymmetry of network attack and defense has troubled security defenders for a long time, and the defensive deception technology evolved based on honeypots provides a new idea for solving this problem. The basic idea is to make the attacker misperceive the attack, which increases the cost of the attacker’s invasion. At the same time, it allows the defender to track and analyze the behavior of the attacker, and make judgments about the attacker’s intentions, thereby blocking the attacker’s way forward one step ahead, and making the balance of network attack and defense tilt toward the defender. People who don’t know this technology generally have the impression of honeypot technology, which is not conducive to the development of this technology. In order to let everyone know more about this technology, this article is written, and we hope this article can serve as a reference for future research. First of all, this article introduces the defensive deception technology, then sorts out the development process of defensive deception according to the time axis, summarizes the existing technologies according to the classification method of defensive deception environment construction, and finally introduces the current market based on the application of this technology, and talk about the future development of this technology.