Presentation 2013-12-15
Dynamic Hybrid System of Honeypot and IDS for Network Security Analysis
Chao Li, Sumiko Miyata, Hirotsugu Kinoshita,
PDF Download Page PDF download Page Link
Abstract(in Japanese) (See Japanese page)
Abstract(in English) The development of information technology has come hand-in-hand with various security problems that are becoming increasingly serious. Many types of security systems have been developed in response. For example, an intrusion detection system (IDS) can help us detect attacks in the network, and honeypots are an effective way to observe illegal access. We can also use these systems to obtain statistical information in a network and learn the hacking skills the attackers used to then strengthen our own system. However, there are some ethical issues associated with the usage of honeypot due to the fact that attackers can potentially use its vulnerability to make the honeypot a springboard to launch additional system attacks. In this research, we discuss the technical details of honeypot and IDS and propose an approach that dynamically combines them. Depending on the IDS's detection result, all packets from an attacker are redirected automatically to the honeypot network over a period of time to protect the hosts in the production network. With our approach, the honeypot is only allowed to interact with specified attackers and unreachable for other hosts on the Internet, which prevents additional attacks and avoids the related ethical issues.
Keyword(in Japanese) (See Japanese page)
Keyword(in English) IDS / honeypot / intrusion detection / network security / Snort / Honeyd
Paper # SITE2013-55
Date of Issue

Conference Information
Committee SITE
Conference Date 2013/12/7(1days)
Place (in Japanese) (See Japanese page)
Place (in English)
Topics (in Japanese) (See Japanese page)
Topics (in English)
Chair
Vice Chair
Secretary
Assistant

Paper Information
Registration To Social Implications of Technology and Information Ethics (SITE)
Language ENG
Title (in Japanese) (See Japanese page)
Sub Title (in Japanese) (See Japanese page)
Title (in English) Dynamic Hybrid System of Honeypot and IDS for Network Security Analysis
Sub Title (in English)
Keyword(1) IDS
Keyword(2) honeypot
Keyword(3) intrusion detection
Keyword(4) network security
Keyword(5) Snort
Keyword(6) Honeyd
1st Author's Name Chao Li
1st Author's Affiliation Faculty of Engineering Kanagawa University()
2nd Author's Name Sumiko Miyata
2nd Author's Affiliation Faculty of Engineering Kanagawa University
3rd Author's Name Hirotsugu Kinoshita
3rd Author's Affiliation Faculty of Engineering Kanagawa University
Date 2013-12-15
Paper # SITE2013-55
Volume (vol) vol.113
Number (no) 355
Page pp.pp.-
#Pages 5
Date of Issue