蜜罐的捕獲能力來自于其數量和分布位置，在同一網絡拓撲中，運用合理的部署策略，
可以部署最少的蜜罐，在最短的時間內捕獲到蠕蟲樣本。本文討論了蜜罐以及蠕蟲掃描策略的研究內容，對紅色代碼蠕蟲進行了深入的分析，根據隨機掃描掃描策略建立了蜜罐部署策略模型，針對紅色代碼這種網絡蠕蟲的掃描策略，在模擬環境下對蜜罐部署策略進行了驗證。
關鍵詞：網絡蠕蟲；分布式蜜罐；部署策略
Abstract：The capture ability of honeypot comes from its number and the distributed places. In the same network topology, by using proper deployment strategy, the number of honeypot and the worm capturing time can both be minimized. Here we discuss the research content of honeypot and the scan strategy of the internet worms ,and analyze the principium of RedCode worm, we also establish a honeypot deployment strategy model based on network worm scan strategy. Finally, we validate the honeypot deployment strategy against RedCode worm scan strategy int network simulation environment.
Key words：internet worm, distributed honeypot, deployment strategy