Framework for distributed virtual honeynets

Abstract

Honeypots and honeynets play a very important role in network security. In the paper, we evaluate the design of the distributed virtual honeynet, which consists of honeynets based on operating system-level virtualization. Using the advantages of this type of virtualization, we design and implement secure data capture engines -hardware and software sensors and one-way secure data collection. In the implementation, we consider the integration of several sensors (including memory, data storage, network traffic, users' activity, temperature, current consumption, and others) and development of secure distributed system. Since in this type of virtualization all honeypots share one kernel of operating system, it is sufficient to implement the sensors in one place -on host system. We also design and implement a central control unit, which manages all virtual honeynets. In paper, we also describe the implementation of proposed distributed virtual honeynet in a campus network.

A Multi-level Perception Security Model Using Virtualization

“…For the former, the highly interactive honeypots are proposed to give attackers the adequate feedbacks of information [29,30]. For the latter, the distributed honey-net system is set up to provide more accurate attacking report under circumstance of highly cooperating between virtual honeypots [31,32]. 3) Out-of-VM Monitoring.…”

Plataforma para Análise de Dados de Honeypots no Curto Prazo

“…Diversas descrições de arquiteturas de honeypots podem ser encontradas na literatura [1][2][3][4][5][6][7][8]. Em [6,8] são mencionadas algumas ferramentas de análise de dados produzidos por honeypots, mas as ferramentas citadas não estão disponíveis publicamente.…”