本文使用VMWare 以弱化系統(tǒng)方式在宿主機(jī)配置高交互的蜜罐系統(tǒng)。配置過(guò)程包括
安裝虛擬操作系統(tǒng)、系統(tǒng)補(bǔ)丁和殺毒程序、系統(tǒng)監(jiān)視、數(shù)據(jù)包捕獲軟件等。利用該系統(tǒng)捕獲了一種網(wǎng)絡(luò)病毒，通過(guò)對(duì)捕獲到的蠕蟲(chóng)病毒的攻擊過(guò)程的記錄和分析，了解了其特征和網(wǎng)絡(luò)病毒運(yùn)行機(jī)制，為進(jìn)一步采取防范措施提供參考。
關(guān)鍵詞：虛擬機(jī)；弱化系統(tǒng)；蜜罐；蠕蟲(chóng)病毒
Abstract: Honeypot of high interactive weakened system is configured with VMWare on host. Configure progresses include installing of virtual OS, patches, antivirus program, system monitor program, recorders and packets capture program, etc. A kind of worm virus is captured with the honeypot system, by recording and analyzing the progresses of the worm virus captured, attack characters and mechanisms of the worm virus is discovered and known, which gives references for protection.
Key words: VMWare; Weakened System; Honeypot; Worm Virus