Detection and Analysis of Active Attacks using Honeypot

Ahmad, Waqas; Raza, Muhammad Arsalan; Nawaz, Sabreena; Waqas, Farhana

doi:10.5120/ijca2023922624

Cited by 6 publications

(1 citation statement)

References 0 publications

Supporting

Mentioning

Contrasting

Order By: Relevance

“…Honeypot is an open-source system designed to attract the attention of attackers [14]. Honeypot systems can be in the form of fake servers or applications that appear active and connected to the internet [15]. When attackers attempt to breach them, the Honeypot system records the attackers' activities, such as the type of attack, tools used, and methods employed to compromise the server network [16].…”

Section: Introductionmentioning

confidence: 99%

The Implementation of Network Server Security System Using Honeypot

Faldi,

Romadoni,

Sumadi

2023

jiko

View full text Add to dashboard Cite

Network Server security is an important aspect of ensuring the integrity and availability of information systems. This research aims to implement network Server security at Muhammadiyah University of East Kalimantan using Honeypot technology. Honeypots are used to attract the attention of attacks and monitor suspicious activities on the network. The research method used is NDLC (Network Development Life Cycle), which includes the design and implementation of Honeypots, as well as the collection and analysis of detected attack data. The research results show that by using three attack techniques, namely Slowloris attack with a Honeypot processing time of 2 seconds and Snort processing time of 180 seconds, GoldenEye attack with a Honeypot processing time of 2 seconds and Snort processing time of 180 seconds, and LOIC tools with a Snort processing time of 180 seconds. Honeypots cannot identify DDoS attacks because they focus more on attacks such as penetration attempts or other suspicious activities.

show abstract

Section: Introductionmentioning

confidence: 99%