Network traffic intelligence using a low interaction honeypot

14th International Conference on Science, Engineering and Technology

自然科学;工业技术

Nyamugudza, Tendai^1 ; Rajasekar, Venkatesh^1 ; Sen, Prasad^1 ; Nirmala, M.^2 ; Madhu Viswanatham, V.^1

School of Computer Science and Engineering, VIT University, Vellore

Tamil Nadu

632014, India^1

School of Information Technology and Engineering, VIT University, Vellore

Tamil Nadu

632014, India^2

关键词: Detection system;    Honey net;    Honeypots;    Network intelligence;    Network intrusions;    Network traffic;    Networking technology;   

Others  :  https://iopscience.iop.org/article/10.1088/1757-899X/263/4/042096/pdf
DOI  :  10.1088/1757-899X/263/4/042096

来源: IOP

【 摘 要 】

Advancements in networking technology have seen more and more devices becoming connected day by day. This has given organizations capacity to extend their networks beyond their boundaries to remote offices and remote employees. However as the network grows security becomes a major challenge since the attack surface also increases. There is need to guard the network against different types of attacks like intrusion and malware through using different tools at different networking levels. This paper describes how network intelligence can be acquired through implementing a low-interaction honeypot which detects and track network intrusion. Honeypot allows an organization to interact and gather information about an attack earlier before it compromises the network. This process is important because it allows the organization to learn about future attacks of the same nature and allows them to develop counter measures. The paper further shows how honeypot-honey net based model for interruption detection system (IDS) can be used to get the best valuable information about the attacker and prevent unexpected harm to the network.