NDLI: HoneydV6: A low-interaction IPv6 honeypot

Content Provider	IEEE Xplore Digital Library
Author	Schindler, Sven Schnor, Bettina Kiertscher, Simon Scheffler, Thomas Zack, Eldad
Copyright Year	2013
Description	Author affiliation: EANTC AG, Berlin, Germany (Zack, Eldad) \|\| Department of Electrical Engineering, Beuth Hochschule, Berlin, Germany (Scheffler, Thomas) \|\| Department of Computer Science, University of Potsdam, Potsdam, Germany (Schindler, Sven; Schnor, Bettina; Kiertscher, Simon)
Abstract	This paper starts with the presentation of results from an IPv6-darknet experiment that we conducted during summer 2012. The experiment indicates that attackers are gaining interest in IPv6 networks and appropriate security tools need to be readied. Therefore, we propose HoneydV6, a low-interaction IPv6 honeypot that can simulate entire IPv6 networks and which may be utilized to detect and analyze IPv6 network attacks. Our implementation extends the well-known low-interaction honeypot Honeyd. To the best of our knowledge, this is the first low-interaction honeypot which is able to simulate entire IPv6 networks on a single host. The huge IPv6 address spaces requires new approaches and concepts in order to enable attackers to find and exploit a honeypot. We increase the chance for an attacker to find a target host in our IPv6 honeypot by reacting to the attacker's requests with the dynamic generation of new IPv6 host instances in the honeynet.
Starting Page	1
Ending Page	12
File Size	178808
Page Count	12
File Format	PDF
ISBN	9789897581311
Language	English
Publisher	Institute of Electrical and Electronics Engineers, Inc. (IEEE)
Publisher Date	2013-07-29
Publisher Place	Iceland
Access Restriction	Subscribed
Rights Holder	SCITEPRESS
Subject Keyword	Darknet Protocols Linux IPv6 Ports (Computers) IPv6 Traffic Analysis IP networks Servers Security Backscatter Honeypot
Content Type	Text
Resource Type	Article

Sl.	Authority	Responsibilities	Communication Details
1	Ministry of Education (GoI), Department of Higher Education	Sanctioning Authority	https://www.education.gov.in/ict-initiatives
2	Indian Institute of Technology Kharagpur	Host Institute of the Project: The host institute of the project is responsible for providing infrastructure support and hosting the project	https://www.iitkgp.ac.in
3	National Digital Library of India Office, Indian Institute of Technology Kharagpur	The administrative and infrastructural headquarters of the project	Dr. B. Sutradhar bsutra@ndl.gov.in
4	Project PI / Joint PI	Principal Investigator and Joint Principal Investigators of the project	Dr. B. Sutradhar bsutra@ndl.gov.in Prof. Saswat Chakrabarti will be added soon
5	Website/Portal (Helpdesk)	Queries regarding NDLI and its services	support@ndl.gov.in
6	Contents and Copyright Issues	Queries related to content curation and copyright issues	content@ndl.gov.in
7	National Digital Library of India Club (NDLI Club)	Queries related to NDLI Club formation, support, user awareness program, seminar/symposium, collaboration, social media, promotion, and outreach	clubsupport@ndl.gov.in
8	Digital Preservation Centre (DPC)	Assistance with digitizing and archiving copyright-free printed books	dpc@ndl.gov.in
9	IDR Setup or Support	Queries related to establishment and support of Institutional Digital Repository (IDR) and IDR workshops	idr@ndl.gov.in

Towards a taxonomy of darknet traffic

On the analysis of backscatter traffic

Detection of DDoS Backscatter Based on Traffic Features of Darknet TCP Packets

Transition to IPv6 with Realm Gateway 64

Mitigating IPv6 Security Vulnerabilities

Amber: A zero-interaction honeypot and network enforcer with modular intelligence

Container based virtual honeynet for increased network security

Implementing high interaction honeypot to study SSH attacks

Comparative analysis of darknet traffic characteristics between darknet sensors

HoneydV6: A low-interaction IPv6 honeypot

Similar Documents

Towards a taxonomy of darknet traffic

On the analysis of backscatter traffic

Detection of DDoS Backscatter Based on Traffic Features of Darknet TCP Packets

Transition to IPv6 with Realm Gateway 64

Mitigating IPv6 Security Vulnerabilities

Amber: A zero-interaction honeypot and network enforcer with modular intelligence

Container based virtual honeynet for increased network security

Implementing high interaction honeypot to study SSH attacks

Comparative analysis of darknet traffic characteristics between darknet sensors

HoneydV6: A low-interaction IPv6 honeypot