Securing Wmn Using Hybrid Honeypot System

Abstract

Wireless Mesh Network (WMN) has been a field of active research in the recent years. Lot of research has focused various routing mechanism but very little effort has been made towards attack detection or intrusion detection. In this paper, we propose an attack detection approach for wireless mesh network using Honeypot technique. A Honeypot is a security resource whose value lies in being probed, attacked or compromised. A honeypot is designed to interact with attackers to collect their attack techniques and behaviors. A collection of such Honeypots laid to effectively trap the attacker is called a Honeynet. In our paper, we propose a honeynet, that is able to trap the attackers by analyzing their attacking techniques and thereby sending the logs to a centralized repository to analyze those logs so as to better understand the technique used for attacking.

Hyhoneydv6: A hybrid Honeypot Architecture for IPv6 Networks

“…In case of the HoneyCloud [5] architecture and the hybrid system for wireless mesh networks [15], it is not clear whether an IP reconfiguration is applied. In case of the HoneyCloud architecture, the system description indicates that the public IP addresses are only configured on the HoneyCloud gateway, which is located between attackers and high-interaction honeypots.…”

“…In contrast to the architecture by Bailey et al, only traffic that indicates malicious activity is forwarded to high-interaction honeypots. Similar to Honey@home, the hybrid honeypot architecture for wireless mesh networks applies low-interaction honeypots to process network scans and only malicious traffic is forwarded to high-interaction honeypots [15]. In contrast to the other architectures, Honeybrid provides a honeypot framework instead of a fully implemented architecture and leaves the handling of network scans to the actual implementation [4].…”