本文使用VMWare 以弱化系統(tǒng)方式在宿主機配置高交互的蜜罐系統(tǒng)。配置過程包括
安裝虛擬操作系統(tǒng)、系統(tǒng)補丁和殺毒程序、系統(tǒng)監(jiān)視、數(shù)據(jù)包捕獲軟件等。利用該系統(tǒng)捕獲了一種網(wǎng)絡(luò)病毒，通過對捕獲到的蠕蟲病毒的攻擊過程的記錄和分析，了解了其特征和網(wǎng)絡(luò)病毒運行機制，為進一步采取防范措施提供參考。
關(guān)鍵詞：虛擬機；弱化系統(tǒng)；蜜罐；蠕蟲病毒
Abstract: Honeypot of high interactive weakened system is configured with VMWare on host. Configure progresses include installing of virtual OS, patches, antivirus program, system monitor program, recorders and packets capture program, etc. A kind of worm virus is captured with the honeypot system, by recording and analyzing the progresses of the worm virus captured, attack characters and mechanisms of the worm virus is discovered and known, which gives references for protection.
Key words: VMWare; Weakened System; Honeypot; Worm Virus