NDLI: Markov Chain Based Roaming Schemes for Honeypots

Content Provider	Springer Nature Link
Author	Tapaswi, Shashikala Mahboob, Adnan Shukla, Ajay Shankar Gupta, Ishan Verma, Pranshu Dhar, Joydip
Copyright Year	2014
Abstract	The paper proposes a reactive roaming scheme for honeypots. The main aim of a honeypot is to capture the activities of the attacker. If the attacker detects honeypot on a system, its value drops. So, the concept of roaming honeypots is being proposed, to prevent the attacker from detecting the honeypot, which in turn increases the efficiency of honeypot and allows collecting rich data about activities of active attackers. The honeypot is shifted to another system which is most probable to be attacked within the network. The concept of Markov chain analysis is being used to detect the most probable system to be attacked based on the current status of the network. Further, using IP shuffling and services on/off concepts, honeypots roam on the network to the most probable system to be attacked using the threat score. Snort is used to capture data about the number of attacks on each of the nodes of the network and the data collected is then used as an input for Markov chain analysis to identify the most probable system where honeypot can be roamed/moved. The roaming scheme has been implemented for both high interaction honeypots and low interaction honeypots. The high interaction implementation helps in capturing in depth information on a shorter range of IP addresses, whereas the low interaction implementation is efficient in capturing information on a large range of IP addresses. The main advantage of this approach is that it predicts the frequency of attacks on the nodes of a particular network and takes a reactive step by starting the honeypot services on that particular node/system on the network.
Starting Page	995
Ending Page	1010
Page Count	16
File Format	PDF
ISSN	09296212
Journal	Wireless Personal Communications
Volume Number	78
Issue Number	2
e-ISSN	1572834X
Language	English
Publisher	Springer US
Publisher Date	2014-05-01
Publisher Place	Boston
Access Restriction	One Nation One Subscription (ONOS)
Subject Keyword	High interaction honeypot Low interaction honeypot Snort Sebek Honeyd Markov chain Roaming honeypots IP shuffling Communications Engineering, Networks Signal, Image and Speech Processing Computer Communication Networks
Content Type	Text
Resource Type	Article
Subject	Electrical and Electronic Engineering Computer Science Applications

Sl.	Authority	Responsibilities	Communication Details
1	Ministry of Education (GoI), Department of Higher Education	Sanctioning Authority	https://www.education.gov.in/ict-initiatives
2	Indian Institute of Technology Kharagpur	Host Institute of the Project: The host institute of the project is responsible for providing infrastructure support and hosting the project	https://www.iitkgp.ac.in
3	National Digital Library of India Office, Indian Institute of Technology Kharagpur	The administrative and infrastructural headquarters of the project	Dr. B. Sutradhar bsutra@ndl.gov.in
4	Project PI / Joint PI	Principal Investigator and Joint Principal Investigators of the project	Dr. B. Sutradhar bsutra@ndl.gov.in Prof. Saswat Chakrabarti will be added soon
5	Website/Portal (Helpdesk)	Queries regarding NDLI and its services	support@ndl.gov.in
6	Contents and Copyright Issues	Queries related to content curation and copyright issues	content@ndl.gov.in
7	National Digital Library of India Club (NDLI Club)	Queries related to NDLI Club formation, support, user awareness program, seminar/symposium, collaboration, social media, promotion, and outreach	clubsupport@ndl.gov.in
8	Digital Preservation Centre (DPC)	Assistance with digitizing and archiving copyright-free printed books	dpc@ndl.gov.in
9	IDR Setup or Support	Queries related to establishment and support of Institutional Digital Repository (IDR) and IDR workshops	idr@ndl.gov.in

A Study on the Markov Chain Based Malicious Code Threat Estimation Model

Performance Comparison and Detection Analysis in Snort and Suricata Environment

A Two-State Markov-Based Wireless Error Model for Bluetooth Networks

Efficient IP-Based TV Service Over UMTS Networks

MAC Protocol Design Based on Satellites Presence for Low-Energy Wireless Sensor Networks

Developments and Constraints in 802.11-Based Roadside-to-Vehicle Communications

An Enhanced Authentication Scheme with Privacy Preservation for Roaming Service in Global Mobility Networks

Honeypots and honeynets: issues of privacy

Group-Based Authentication and Key Agreement

Markov Chain Based Roaming Schemes for Honeypots

Similar Documents

A Study on the Markov Chain Based Malicious Code Threat Estimation Model

Performance Comparison and Detection Analysis in Snort and Suricata Environment

A Two-State Markov-Based Wireless Error Model for Bluetooth Networks

Efficient IP-Based TV Service Over UMTS Networks

MAC Protocol Design Based on Satellites Presence for Low-Energy Wireless Sensor Networks

Developments and Constraints in 802.11-Based Roadside-to-Vehicle Communications

An Enhanced Authentication Scheme with Privacy Preservation for Roaming Service in Global Mobility Networks

Honeypots and honeynets: issues of privacy

Group-Based Authentication and Key Agreement

Markov Chain Based Roaming Schemes for Honeypots