Effective of Unicast and Multicast IP Address Attack over Intrusion Detection System with Honeypot

Pomsathit, A.

doi:10.1109/scet.2012.6342030

Cited by 7 publications

(3 citation statements)

References 7 publications

Supporting

Mentioning

Contrasting

Order By: Relevance

“…Honeypots are not used for solving any network security problem on their own; they are rather used as a part of the system security, which means that honeypots are designed and positioned according to the problems they are to solve. An extensive literature review reveals that there are many security applications where intrusion detection and prevention systems (IDPS) are used in conjunction with honeypot systems [10][11][12][13][14][15][16][17].…”

Section: Literature Reviewmentioning

confidence: 99%

“…In the work of Pomsathit, IDSs were used with honeypot systems on distributed networks. In this study, the efficiency of these systems was measured by analyzing a system first with IDS, then reanalyzing the same system with a honeypot IDS [17]. In their work, Jiang and Liu emphasized the importance of implementing honeypot systems in systems that enterprise business networks.…”

Section: Literature Reviewmentioning

confidence: 99%

See 1 more Smart Citation

SoftSwitch: a centralized honeypot-based security approach usingsoftware-defined switching for secure management of VLAN networks

Baykara¹,

Daş²

2019

Turk J Elec Eng & Comp Sci

View full text Add to dashboard Cite

Honeypot systems are traps for intruders which simulate real systems such as web, application, and database servers used in information systems. Using these systems, unauthorized and malicious access can be efficiently detected.Honeypot is an entity which acts as a source of valued information and its behavior can be monitored. The inability or difficulty of intrusion detection is a serious security problem in networks including virtual local area network (VLAN).According to the literature, the use of honeypots for intrusion detection and prevention in networks including VLAN is strongly recommended.In this paper, in order to provide security and to detect unauthorized and malicious access to the VLAN, a centralized honeypot-based approach with a software-defined switching is proposed. With the developed and proposed honeypot-based intrusion detection and prevention approach, reduction in false alarm, network traffic, and cybersecurity cost, as well as centralized control, was provided. The proposed system has been run in GNS3 simulation software and successful results have been obtained by reducing false alarm level, network traffic, and cybersecurity cost. The numerical results of the attacks that were detected based on the port and protocol using SoftSwitch are detailed in the performance evaluation subsection.together are recommended [1,2].Honeypot systems are security tools that have recently been used in vulnerable information systems [3].They gain their security advantage as they are being attackable [4]. These honeypot systems simulate real systems such as web, application, and database servers used in information systems, and they are trapping systems for attackers. With the use of these systems, unauthorized or malicious access can be detected. A honeypot is an isolated resource which looks like a target with valuable information to the attackers; however, the traffic movement to this target is particularly monitored. These systems attract the attackers to them allowing the investigators to analyze any pattern of aggressive or assault behavior [5].

show abstract

Section: Literature Reviewmentioning

confidence: 99%

Section: Literature Reviewmentioning

confidence: 99%

SoftSwitch: a centralized honeypot-based security approach usingsoftware-defined switching for secure management of VLAN networks

Baykara¹,

Daş²

2019

Turk J Elec Eng & Comp Sci

View full text Add to dashboard Cite

show abstract

“…For example, Mccarty et al [11] were among the first to conduct analysis on integrating HP and honeynet methodologies. Pomsathit [12] proposed an HP system for ensuring security in communication in distributed networks. Li and Liu [13] proposed a model for automatically constructing signatures by using honeypots utilizing the data captured in them.…”

Section: Introductionmentioning

confidence: 99%

HoneyNetCloud Investigation Model, A Preventive Process Model for IoT Forensics

Raman¹,

Varadharajan²

2021

ISI

View full text Add to dashboard Cite

With the pervasive usage of sensing systems and IoT things, the importance of security has increased. Attempts towards breaching IoT security systems by attackers are on upsurge. Many intrusions in embedded systems, sensing equipment and IoT things have occurred in the past. Though there are cyber security tools like Antivirus, Intrusion detection and prevention systems available for securing the digital devices and its networks. However, a forensic methodology to be followed for the analysis and investigation to detect origin cause of network incidents is lacking. This paper derives a comprehensive preventive cyber forensic process model with honeypots for the digital IoT investigation process which is formal, that can assist in the court of law in defining the reliability of the investigative process. One year data of various attacks to the IoT network has been recorded by the honeypots for this study. The newly derived model HIM has been validated using various methods and instead of converging on a particular aspect of investigation, it details the entire lifecycle of IoT forensic investigation. The model is targeted to address the forensic analysts’ requirements and the need of legal fraternity for a forensic model. The process model follows a preventive method which reduce further attacks on network.

show abstract