First insights from a mobile honeypot

Wählisch, Matthias; Trapp, Sebastian; Keil, Christian; Schönfelder, Jochen; Schmidt, Thomas C.; Schiller, Jochen

doi:10.1145/2342356.2342422

Cited by 8 publications

(5 citation statements)

References 2 publications

Supporting

Mentioning

Contrasting

Order By: Relevance

“…Similarly, most of the honeypots are designed for one fixed use case and lag the option to be configured to emulate different devices easily. Only a few honeypots have been designed to be mobile or portable [14], [17], [18], offering the ability to be placed close to the operating area of UAVs or perhaps even mounted to a UAV directly. Finally, it is vital for a honeypot to emulate a drone's radio interfaces; none of the honeypots is designed to emulate and log WiFi radios, only Bluepot [13] can emulate the (rarely used) Bluetooth radio.…”

Section: Obex Table I Analysis Of Honeypot Drone Capabilities In the State Of The Artmentioning

confidence: 99%

HoneyDrone: A medium-interaction unmanned aerial vehicle honeypot

Daubert

Boopalan

Mühlhäuser

et al. 2018

NOMS 2018 - 2018 IEEE/IFIP Network Operations and Management Symposium

View full text Add to dashboard Cite

Over the last years, we have experienced an increased utilization of Unmanned Aerial Vehicles (UAVs) not only in personal, but also commercial and public safety applications. Simultaneously, malicious activities have emerged too; from hijacking of UAVs (and their cargo), to the theft of private information stored in UAVs, attacks not only exist but seem to increase both in their numbers and their sophistication. In this paper, we propose HoneyDrone, the first honeypot that is specifically designed for the protection of UAVs. HoneyDrone emulates a number of UAV-specific and UAV-tailored protocols, making it possible to lure adversaries into attacking it. The honeypot is designed to run in portable low-cost devices, e.g., Raspberry Pis, which makes it possible to strategically deploy it in a variety of locations. Our system can assist in detecting active attackers in a certain area, as well as in shedding light into the adversaries' techniques for compromising UAVs. We evaluate HoneyDrone's performance and also examine a number of different realistic attack scenarios to show how the honeypot can cope with them.

show abstract

Section: Obex Table I Analysis Of Honeypot Drone Capabilities In the State Of The Artmentioning

confidence: 99%

HoneyDrone: A medium-interaction unmanned aerial vehicle honeypot

Daubert

Boopalan

Mühlhäuser

et al. 2018

NOMS 2018 - 2018 IEEE/IFIP Network Operations and Management Symposium

View full text Add to dashboard Cite

show abstract

“…Existing work in this direction [8,15,7,14] focuses on the detection of mobile-specific malware. Specifically, Mulliner et al were the first to discuss the idea of a honeypot for smartphones, by providing initial ideas, challenges and an architecture for their proposed system [8].…”

Section: Related Workmentioning

confidence: 99%

“…Specifically, Mulliner et al were the first to discuss the idea of a honeypot for smartphones, by providing initial ideas, challenges and an architecture for their proposed system [8]. Moreover, in [15,14] Wahlisch et al provided insights from the deployment of a honeypot on a mobile network. However, their honeypot is not specifically crafted for mobile devices, but rather existing Linux-based desktop honeypots deployed in mobile networks.…”

Section: Related Workmentioning

confidence: 99%

This network is infected

Vasilomanolakis

Karuppayah

Fischer

et al. 2013

Proceedings of the Third ACM Workshop on Security and Privacy in Smartphones &Amp; Mobile Devices

View full text Add to dashboard Cite

In recent years, the number of sophisticated cyber attacks has increased rapidly. At the same time, people tend to utilize unknown, in terms of trustworthiness, wireless networks in their daily life. They connect to these networks, e.g., airports, without knowledge of whether they are safe or infected with actively propagating malware. In traditional networks, malicious behavior can be detected via Intrusion Detection Systems (IDSs). However, IDSs cannot be applied easily to mobile environments and to resource constrained devices. Another common defense mechanism is honeypots, i.e., systems that pretend to be an attractive target to attract malware and attackers. As a honeypot has no productive use, each attempt to access it can be interpreted as an attack. Hence, they can provide an early indication on malicious network environments. Since low interaction honeypots do not demand high CPU or memory requirements, they are suitable to resource constrained devices like smartphones or tablets.In this paper we present the idea of Honeypot-To-Go. We envision portable honeypots on mobile devices that aim on the fast detection of malicious networks and thus boost the security awareness of users. Moreover, to demonstrate the feasibility of this proposal we present our prototype HosTaGe, a low-interaction honeypot implemented for the Android OS. We present some initial results regarding the performance of this application as well as its ability to detect attacks in a realistic environment. To the best of our knowledge, HosTaGe is the first implementation of a generic low-interaction honeypot for mobile devices.

show abstract

“…A number of state-of-the-art honeypots can monitor and emulate Wi-Fi connectivity, as well as some relevant protocols, such as Telnet, SSH, FTP [1]. However, only few honeypots have been designed to be mobile or portable [4]- [6], offering the ability to be placed close to the operating area of UAVs or mounted to a UAV directly. More significantly, to the best of our knowledge, no existing honeypot has been specifically designed to emulate radio and protocol properties of UAVs.…”

Section: Introductionmentioning

confidence: 99%

Don't steal my drone: Catching attackers with an unmanned aerial vehicle honeypot

Vasilomanolakis

Daubert

Boopalan

et al. 2018

NOMS 2018 - 2018 IEEE/IFIP Network Operations and Management Symposium

View full text Add to dashboard Cite

The increased utilization of Unmanned Aerial Vehicles (UAVs) in both personal as well as commercial and public safety scenarios has also opened the door to adversaries. In more details, such malicious activities may include the hijacking of the UAV (and its cargo), the theft of private information stored in the device, etc. In this paper, we introduce the idea of a honeypot that is specifically designed for the protection of UAVs. The honeypot, which is also capable of running on small portable devices, e.g., a Raspberry Pi, emulates a number of UAV-specific and UAV-tailored protocols, making it possible to lure adversaries into attacking it. Our system can assist into detecting active attackers in a certain area as well as into shedding light into the adversaries' techniques for compromising UAVs.

show abstract

First insights from a mobile honeypot

Cited by 8 publications

References 2 publications

HoneyDrone: A medium-interaction unmanned aerial vehicle honeypot

HoneyDrone: A medium-interaction unmanned aerial vehicle honeypot

This network is infected

Don't steal my drone: Catching attackers with an unmanned aerial vehicle honeypot

Contact Info

Product

Resources

About