欺骗主机和欺骗网络作为一种网络安全资源,其安全价值在于被人们扫描、攻击和入侵时,通过创建一个高度可控的黑客攻击环境,从而捕获尽可能多的同入侵有关的信息。基于这些信息,获得互联网所面临的安全风险。本文在分析它的实现方式技术基础上,形式化的定义了入侵诱骗系统,提出了入侵诱骗的体系结构,并给出了一个入侵诱骗系统的实现模型。 Fraudulently hosting and spoofing the Internet as a cybersecurity resource has the security value of capturing as much intrusion-related information as possible by creating a highly-controlled hacking environment when it is scanned, compromised, and intruded. Based on this information, access to the Internet security risks. Based on the analysis of the technology of its implementation, this paper formally defines the system of intrusion decoy, proposes the architecture of intrusion decoy, and presents an implementation model of intrusion decoy system.