Presentation 2013-05-17
The affect of the honeypot on the darknet observation, part 2
Ryoichi YOKOTA, Ryo OKUBO, Naoto SONE, Masakatu MORII,
PDF Download Page PDF download Page Link
Abstract(in Japanese) (See Japanese page)
Abstract(in English) For observing attack of malware, unused network called darknet is used. We are running system that forward packet reached to some IP address in darknet to honeypot. Since we observed the change of scanning pattern due to response from honeypot in darknet, we can say that honeypot give some influence to attackers. Moreover we observed that attackers disconnect to honeypot after some specific response because the honeypot does not respond correctly. After We corrected the honeypot to respond as the real server does, we observed more command. From this result we can see that attackers confirm response in application layer and change the way of attack. In this paper, we consider how to improve honeypot that influence the attackers.
Keyword(in Japanese) (See Japanese page)
Keyword(in English) Darknet / Honeypot / NAT / MySQL / Dionaea / bot
Paper # LOIS2013-4
Date of Issue

Conference Information
Committee LOIS
Conference Date 2013/5/9(1days)
Place (in Japanese) (See Japanese page)
Place (in English)
Topics (in Japanese) (See Japanese page)
Topics (in English)
Chair
Vice Chair
Secretary
Assistant

Paper Information
Registration To Life Intelligence and Office Information Systems (LOIS)
Language JPN
Title (in Japanese) (See Japanese page)
Sub Title (in Japanese) (See Japanese page)
Title (in English) The affect of the honeypot on the darknet observation, part 2
Sub Title (in English)
Keyword(1) Darknet
Keyword(2) Honeypot
Keyword(3) NAT
Keyword(4) MySQL
Keyword(5) Dionaea
Keyword(6) bot
1st Author's Name Ryoichi YOKOTA
1st Author's Affiliation Fuculity of Engneering, Kobe University()
2nd Author's Name Ryo OKUBO
2nd Author's Affiliation Graduate School of Engineering, Kobe University
3rd Author's Name Naoto SONE
3rd Author's Affiliation Graduate School of Education, Naruto University of Education
4th Author's Name Masakatu MORII
4th Author's Affiliation Graduate School of Engineering, Kobe University
Date 2013-05-17
Paper # LOIS2013-4
Volume (vol) vol.113
Number (no) 43
Page pp.pp.-
#Pages 4
Date of Issue