Analytical Models for the Interaction between Botmasters and Honeypots
نویسندگان
چکیده
Analytical Models for the Interaction Between Botmasters and Honeypots
منابع مشابه
A Markov Decision Process Model for High Interaction Honeypots
Honeypots, which are traps designed to resemble easy to compromise computer systems, have become essential tools for security professionals and researchers because of their significant contribution in disclosing the underworld of cybercirmes. However, recent years have witnessed the development of several anti-honeypot technologies. Botmasters can exploit the fact that honeypots should not part...
متن کاملDempster-Shafer Evidence Combining for (Anti)-Honeypot Technologies
Honeypots are network surveillance architectures designed to resemble easy-to-compromise computer systems. They are deployed with the aim to trap hackers in order to help security professionals capture, control, and analyze malicious Internet attacks and other activities of hackers. A botnet is an army of compromised computers controlled by a bot herder and used for illicit financial gain. Botn...
متن کاملA Scalable Architecture for Persistent Botnet Tracking
The botnet phenomenon has recently garnered attention throughout both academia and industry. Unfortunately, botnets are still a mystery. In fact, today, very little is known about even the most basic botnet properties, such as size, growth, or demographics. The primary reason for this lack of knowledge is the fact that the existing approaches for measuring such properties are simply inadequate;...
متن کاملSelf Adaptive High Interaction Honeypots Driven by Game Theory
High-interaction honeypots are relevant to provide rich and useful information obtained from attackers. Honeypots come in different flavors with respect to their interaction potential. A honeypot can be very restrictive, but then only a few interactions can be observed. If a honeypot is very tolerant though, attackers can quickly achieve their goal. Having the best the trade-off between attacke...
متن کاملContractual Date of Delivery M
This document provides an overview of all NoAH components, defines their requirements and describes the interface between them. The NoAH architecture, as described so far, is a set of individual components that cooperate to form a farm of distributed honeypots. Although the main NoAH components –low-and high-interaction honeypots, signature generation, honey@home and funneling/tunneling – can w...
متن کامل