To present a solution to problem of bad collaboration and weak real-time performance in former Honeynet, based on citing Realm, a new Honeynet Model — BRHNS(Based Realm Honeynet) is presented. BRHNS makes use of cooperation between Realms, shares knowledge of new intrusion rules, IDS rule-lib is updated in real time, the detection efficiency of IDS is improved and the workload of Honeynet is effectively reduced, consequently, the efficiency of Honeynet is improved. After BRHNS has been implemented preliminarily, the efficiency of Honeynet is analyzed from response time, it is found that the efficiency of BRHNS is improved greatly than formal Honeynet.
展开▼
