由于现有的被动捕获技术逐渐无法适应网络安全需要,本文提出一种基于主动技术的恶意代码捕获方法,结合主动技术和高交互式蜜罐构建了恶意代码自动捕获系统Decoy。Decoy主动寻找夹带恶意代码的可疑目标,启动客户端浏览器主动访问,诱导恶意代码实施攻击,进行实时监控并加以捕获。实验证明,采用主动技术的捕获器,主动性强,捕获效率高。 Since the existing passive acquisition technology can not meet the needs of network security gradually, a malicious code capture method based on active technology is proposed in this paper. The automatic code capture system Decoy is constructed based on active technology and highly interactive honeypot. Decoy proactively looks for suspicious targets that carry malicious code, initiates client browser active access, induces malicious code attacks, and real-time monitors and captures. Experiments show that the use of active capture technology, strong initiative, capture high efficiency.