Design of Security Defense System based on Double Honeypot

The single traditional honeypots can not ensure the long time to interact with attackers, so unable to extract information about the adequacy of. In order to improve the server's security and collect more information of the attacker, this paper presents a defense system scheme based on double honeypot technology, in the region of DMZ firewall installed two sets of honeypot honeypot system, the A is to lure the attacker Virtual Server Windows platform based on B, honeypot based on Linux platform, through Libevent, Libpcap and other library functions fully simulate the real server, the honeypot with safety protection measures of strong and impregnable characteristic.