|
To address the problem that traditional network defense techniques are difficult to cope with scanning attacks launched by internal attackers, this paper proposes a Virtual Network Topology Deception Defense mechanism(VNTDD)based on the idea of deception defense. In order to solve the problem of lack of randomness and security of virtual network topology, we divide the virtual network topology into three categories: forwarding nodes, real nodes and virtual nodes, and analyze their deployment locations and numbers respectively to generate a random virtual network topology, and enables the deployment of virtual network topology on the underlying real network through traffic control mechanisms. Finally, through experimental analysis, the VNTDD deception defense mechanism proposed in this paper can effectively prolong the scanning process of the intranet by internal attackers.
|
