Skip to Main content Skip to Navigation
Conference papers

Collection and analysis of attack data based on honeypots deployed on the Internet

Abstract : The CADHo project (Collection and Analysis of Data from Honeypots) is an ongoing research action funded by the French ACI "Securité & Informatique" [1]. It aims at building an environment to better understand threats on the Internet and also at providing models to analyze the observed phenomena. Our approach consists in deploying and sharing with the scientific community a distributed platform based on honeypots that gathers data suitable to analyze the attack processes targeting machines connected to the Internet. This distributed platform, called Leurré.com and administrated by Institut Eurécom, offers each partner collaborating to this initiative access to all collected data in order to carry out statistical analyzes and modeling activities. So far, about thirty honeypots have been operational for several months in twenty countries of the five continents. This paper presents a brief overview of this distributed platform and examples of results derived from the data. It also outlines the approach investigated to model observed attack processes and to describe the intruders behaviors once they manage to get access to a target machine
Complete list of metadata

https://hal.archives-ouvertes.fr/hal-00140390
Contributor : Mohamed Kaaniche Connect in order to contact the contributor
Submitted on : Friday, April 6, 2007 - 10:38:15 AM
Last modification on : Tuesday, October 19, 2021 - 11:18:03 PM
Long-term archiving on: : Tuesday, April 6, 2010 - 11:04:16 PM

File

Cadho05-QoP2005.pdf
Files produced by the author(s)

Identifiers

  • HAL Id : hal-00140390, version 1

Citation

Eric Alata, Marc Dacier, Yves Deswarte, Mohamed Kaâniche, Kostya Kortchinsky, et al.. Collection and analysis of attack data based on honeypots deployed on the Internet. Workshop on Quality of protection (QoP 2005), Security Measurements and Metrics, Sep 2005, France. pp.79-92. ⟨hal-00140390⟩

Share

Metrics

Les métriques sont temporairement indisponibles