| Presentation | 2017-11-10 Investigation of A Method for Detecting New Scanning Activities by Correlating Low-Interaction Honeypots with Darknet Ryoh Akiyoshi, Daisuke Kotani, Yasuo Okabe, |
|---|---|
| PDF Download Page |  PDF download Page Link |
| Abstract(in Japanese) | (See Japanese page) |
| Abstract(in English) | In this paper, we discuss a method for detecting new scanning activities by using low-interaction honeypots and darknet. High-interaction honeypot can obtain rich information, however there is a problem in implementation difficulty from a viewpoint of security. In contrast, although low-interaction honeypot can obsarve only limited attacks, that can be implemented relatively safely. Then we investigate a method to associate data obtained from low-interaction honeypot with those from darknet. With this, new scanning activities can be detected automatically, as it is possible to get rich information safely and efficiently. In this paper, we conducted the experimental tests which classify data obtained by Lurker based on the payloads and its consideration. |
| Keyword(in Japanese) | (See Japanese page) |
| Keyword(in English) | Darknet / Low Interaction Honeypot / Classification |
| Paper # | IA2017-25 |
| Date of Issue | 2017-11-03 (IA) |
| Conference Information | |
| Committee | IA |
|---|---|
| Conference Date | 2017/11/10(1days) |
| Place (in Japanese) | (See Japanese page) |
| Place (in English) | Hotel Greenpia Minamiaso |
| Topics (in Japanese) | (See Japanese page) |
| Topics (in English) | Student Sessions, etc. (cosponsored by JSPS 163rd Committee on Internet Technology) |
| Chair | Katsuyoshi Iida(Hokkaido Univ.) |
| Vice Chair | Rei Atarashi(IIJ) / Hiroyuki Osaki(Kwansei Gakuin Univ.) / Tomoki Yoshihisa(Osaka Univ.) |
| Secretary | Rei Atarashi(Tokyo Metropolitan Univ.) / Hiroyuki Osaki(TOYOTA-IT) / Tomoki Yoshihisa |
| Assistant | Kenji Ohira(Tokushima Univ.) / Ryohei Banno(NTT) / Toshiki Watanabe(NEC) |
| Paper Information | |
| Registration To | Technical Committee on Internet Architecture |
|---|---|
| Language | JPN |
| Title (in Japanese) | (See Japanese page) |
| Sub Title (in Japanese) | (See Japanese page) |
| Title (in English) | Investigation of A Method for Detecting New Scanning Activities by Correlating Low-Interaction Honeypots with Darknet |
| Sub Title (in English) | |
| Keyword(1) | Darknet |
| Keyword(2) | Low Interaction Honeypot |
| Keyword(3) | Classification |
| 1st Author's Name | Ryoh Akiyoshi |
| 1st Author's Affiliation | Kyoto University(Kyoto Univ.) |
| 2nd Author's Name | Daisuke Kotani |
| 2nd Author's Affiliation | Kyoto University(Kyoto Univ.) |
| 3rd Author's Name | Yasuo Okabe |
| 3rd Author's Affiliation | Kyoto University(Kyoto Univ.) |
| Date | 2017-11-10 |
| Paper # | IA2017-25 |
| Volume (vol) | vol.117 |
| Number (no) | IA-294 |
| Page | pp.pp.13-18(IA), |
| #Pages | 6 |
| Date of Issue | 2017-11-03 (IA) |