Dynamic Virtual Network Honeypot

Park, Byung-Ju; Dang, Sa Pham; Noh, Sichul; Yi, Junmin; Park, Min‐Ho

doi:10.1109/ictc46691.2019.8939791

Cited by 9 publications

(4 citation statements)

References 3 publications

Supporting

Mentioning

Contrasting

Order By: Relevance

“…Logically, this stands to reason given a honeypot or honeynet is a computing system and therefore all of the complexity issues driving the development of autonomic computing apply. What's more, without autonomy, the literature suggests honeypots and honeynets will not be able to escape from under the administration and maintenance burden [1,39,25]. Such goes hand in hand with the positive upwards trend towards ML integration we observed.…”

Section: Open Challengesmentioning

confidence: 71%

“…The initial breakaway from traditional or static honeypots and honeynets comes in the form of dynamic honey systems. According to the research [23,24,25], the term dynamic describes the ability for the honeypot or honeynet system to adapt based on changes in the system architectures surrounding it. Importantly, the honeypot or honeynet adopts the responsibility for probing the architecture detect changes.…”

Section: Dynamicmentioning

confidence: 99%

See 1 more Smart Citation

A green scheduling algorithm for cloud-based honeynets

Pittman¹,

Alaee²

2023

Front. Sustain.

View full text Add to dashboard Cite

Modern businesses leverage cloud architecture to achieve agile and cost-effective technology services. Doing so comes at the expense of the environment though cloud technologies consume large quantities of energy. Cloud energy consumption is concerning in light of global climate trends and dwindling fossil fuel reserves. Consequently, increasing attention is given to sustainable and green cloud computing, which seeks to optimize compute-resource allocation and usage of virtualized systems and services. At the same time, progress toward sustainable and green cloud technology is impeded because as more enterprises deploy services into cloud architecture, cybersecurity threats follow. Unfortunately, cybersecurity technologies are optimized for maximum service overwatch without regard for compute resources and energy. This negates the energy reduction achieved in recent sustainable technology advancements. In this work, a generalized cybersecurity honeynet scheduling algorithm is proposed, in which power, CPU, and network overhead are operationalized to increase sustainability while balancing defensive mechanisms. The work describes both the mathematical foundation for the algorithm and a pseudocode proof of concept.

show abstract

Section: Open Challengesmentioning

confidence: 71%

Section: Dynamicmentioning

confidence: 99%

A green scheduling algorithm for cloud-based honeynets

Pittman¹,

Alaee²

2023

Front. Sustain.

View full text Add to dashboard Cite

show abstract

“…This problem also exists in the proposal made by B. Park [20], but this proposal only generates a new honeypot when a new attack is detected. S. Kyung et al [21] presented a newer version of HoneyMix, which is called HoneyProxy.…”

Section: Honeypot System In Sdnfv-based Networkmentioning

confidence: 99%

“…The time from when the attacker starts attacking until when the attacker receives a response from the victim is referred to as response time. We calculated the response time and compared it with the results of most related works (DVNH) [20], and the results are depicted in Figure 8. DVNH needs 19 seconds to generate a new honeypot and connect it to the attacker, whereas our system needs only 13.551 seconds.…”

Section: Response Time Evaluationmentioning

confidence: 99%

EVHS - Elastic Virtual Honeypot System for SDNFV-Based Networks

Thang

Park²,

Joo³

2022

Int. j. commun. netw. inf. secur.

View full text Add to dashboard Cite

The SDNFV-based network has leveraged the advantages of software-defined networking (SDN) and network-function virtualization (NFV) to become the most prominent network architecture. However, with the advancement of the SDNFV-based network, more attack types have emerged. This research focuses on one of the methods (use of the honeypot system) of preventing these attacks on the SDNFV-based network. We introduce an SDNFV-based elastic virtual honeypot system (EVHS), which not only resolves problems of other current honeypot systems but also employs a new approach to efficiently manage and control honeypots. It uses a network-intrusion-detection system (NIDS) at the border of the network to detect attacks, leverages the advantages of SDN and NFV to flexibly generate honeypots, and connects attackers to these honeypots by using a moving-target defense mechanism. Furthermore, we optimize the system to efficiently reuse the available honeypots after the attacks are handled. Experimental results validate that the proposed system is a flexible and efficient approach to manage and provide virtual honeypots in the SDNFV-based network; the system can also resolve the problems encountered by current honeypot systems.

show abstract