Honeymaze: a Hybrid Intrusion Detection System

In this paper we discussed, a hybrid intrusion detection system using honey pot. Hybrid honeypot is the combination of low and high interaction honeypots. It helps in detecting intrusion attacking on the system. For this, I have proposed the hybrid model of hybrid honeypot. Low interaction honeypot provide enough interaction to attackers to allow honeypot to detect interesting attacks. It also includes the concept of neural network in combination with anomaly detection technique. Attacks against the honeypot are caught, and any incurred state changes are discarded and the alarm is raised. The outcome of processing a request is used to filter future attack instances and could be used to update the anomaly detector and updated in the log table. By using hybrid architecture, we can reduce the cost of deploying honeypots.