关键词: 网络服务伪装, 自动响应模型, 状态图

Abstract: Monitoring and tracking attacks and its processes based on network service camouflaging can find out unknown attack and its characters.In order to response uncertain attacks automatically，automatic response model of network service camouflaging is introduced.This model builds state machine through self-learning from network services.Then it uses the extracted state machine to do the pattern matching and then constructs the content of the response.At the same time，the idea of CEST（Colored Event-driven State Transition） is introduced to control the response process.The experimental results verify the validity of this model.

Key words: network service camouflaging, automatic response model, state machine