Custom honeypot in the research on the application of attack against the worm

Full text analyzes the characteristics and harm of worm virus,and put forward a kind of custom honeypot system design:according to the intrusion detection,virtual honeypot and data mining technology,put the custom honeypot into the DMZ,using guile address space technology capture known worms,delay the unknown worms scanning speed,and analyzes the log by data mining,update the intrusion detection system rules set,and make timely response and take measures in the subsequent attack.Discusses the custom honeypot system against the worm virus attack in the feasibility and the application implementation.