A social agent dynamic honeynet for attack modeling

Abstract

In our paper we present initial findings related to an effort to develop an agent based dynamic honeynet that simulates user interactions with social networks for the purposes of developing attack models. Our solution allows security professionals to create networks simulating user activity for companies and government entities through the provision of a set of parameters. Our research pointed to the importance of instantiating a social dimension to our virtual agents, providing the agent with the ability to interact with a variety of social networks. For this purpose, we developed influence models to learn patterns from actual users' activity on social networks to improve the effectiveness of the social agents. We discuss our responses to the technical challenges and analytically investigate the initial results of our honeynet's ability to attract adversary activity.