
Formed in 2009, the Archive Team (not to be confused with the archive.org Archive-It Team) is a rogue archivist collective dedicated to saving copies of rapidly dying or deleted websites for the sake of history and digital heritage. The group is 100% composed of volunteers and interested parties, and has expanded into a large amount of related projects for saving online and digital history.
History is littered with hundreds of conflicts over the future of a community, group, location or business that were "resolved" when one of the parties stepped ahead and destroyed what was there. With the original point of contention destroyed, the debates would fall to the wayside. Archive Team believes that by duplicated condemned data, the conversation and debate can continue, as well as the richness and insight gained by keeping the materials. Our projects have ranged in size from a single volunteer downloading the data to a small-but-critical site, to over 100 volunteers stepping forward to acquire terabytes of user-created data to save for future generations.
The main site for Archive Team is at archiveteam.org and contains up to the date information on various projects, manifestos, plans and walkthroughs.
This collection contains the output of many Archive Team projects, both ongoing and completed. Thanks to the generous providing of disk space by the Internet Archive, multi-terabyte datasets can be made available, as well as in use by the Wayback Machine, providing a path back to lost websites and work.
Our collection has grown to the point of having sub-collections for the type of data we acquire. If you are seeking to browse the contents of these collections, the Wayback Machine is the best first stop. Otherwise, you are free to dig into the stacks to see what you may find.
The Archive Team Panic Downloads are full pulldowns of currently extant websites, meant to serve as emergency backups for needed sites that are in danger of closing, or which will be missed dearly if suddenly lost due to hard drive crashes or server failures.
推荐提供类似默安的幻阵的tcp代理蜜罐功能,这样agent 的负载会更小,也能复用更多开源蜜罐
https://www.moresec.cn/solution-deception.html
https://www.moresec.cn/news/51
各商业公司通过更为细化的模拟手段,将原有蜜罐的模拟层面从终端系统层下放至应用层面,即可以模拟各类常见应用使得攻击者能够进入此类应用进行基本控制操作,深化了蜜罐交互仿真度;同时针对部署密度和成本问题,增设了探针,蜜罐不再是直接实机部署在真实业务,而是通过在真实环境部署探针降低单点部署成本,增加部署密度,并将探针与后台蜜罐关联,实现对攻击的感知。
基于上述两点优化思想,各商业公司提供了现今我们市面上看到的种类繁多的商业化蜜罐方案,总结来看此类方案可以归纳成两类:探针导向式和流量牵引式。
探针导向式即如我们所述,通过在真实业务中部署探针降低单点部署成本,同时通过模拟应用提升仿真度,当攻击者攻击探针时,探针将进行转发,从而将攻击者带入蜜罐的模拟应用中,从而第一时间感知攻击者行为并进行告警。
流量牵引式其实与探针导向式类似,只是其将探针的导向能力交给了流量牵引器,牵引器前端关联探针,后端关联蜜罐,一旦探针受到攻击,流量牵引器会更改其流量方向,将攻击牵引至蜜罐中,从而实现对攻击者的感知和尝试驻留。