关键词: 蜜罐加密, 隐私, 安全, 蜜罐, 加密

Abstract: In brute-force attacks, the decode output can confirm whether the guessed key is correct or not. Therefore given enough time, the brute-force attack can exit with the correct key determined. Honey encryption makes the output look like that the message is correctly decrypted even if the guessed key is incorrect. In this way the attacker cannot determine whether the brute-force attack is successful and when to quit the brute-force process. In this paper, the honey encryption mechanism is designed and implemented. It is also applied to three types of private data including Chinese identification numbers, mobile phone numbers and debit card passwords. The performance of our mechanism is evaluated and an enhancement is proposed to address the overhead issue. In the implementation, uniformly/non-uniformly distributed message space and symmetric/ asymmetric encryption mechanisms are covered. Lessons learned from designing, implementing and evaluating the honey encryption mechanism are also presented.

Key words: honey encryption, privacy, security, honey, encryption