Agent-based optimization of emulations of network server applications in honeypots

Yilun Zhao, Jeremy Joseph Blum

Research output: Chapter in Book/Report/Conference proceedingConference contribution

1 Scopus citations

Abstract

Low-interaction honeypots can provide a cost-effective security mechanism for a wide range of computer systems. A central challenge in the development of low-interaction honeypots is the development of emulation programs that mimic the action of server applications on the target platform. The emulation programs must be of high enough fidelity to fool attackers. However, the manual development of these emulations is extremely time-consuming. This paper describes an agent-based optimization system that can automate the generation of emulation programs for honeypots. The system is evaluated in its ability to emulate a mail server. In this evaluation, the system produced correct responses to more than 99% of test data queries.

Original languageEnglish (US)
Title of host publication2012 IEEE 16th International Symposium on Consumer Electronics, ISCE 2012
DOIs
StatePublished - Sep 26 2012
Event2012 IEEE 16th International Symposium on Consumer Electronics, ISCE 2012 - Harrisburg, PA, United States
Duration: Jun 4 2012Jun 6 2012

Publication series

NameDigest of Technical Papers - IEEE International Conference on Consumer Electronics
ISSN (Print)0747-668X

Other

Other2012 IEEE 16th International Symposium on Consumer Electronics, ISCE 2012
CountryUnited States
CityHarrisburg, PA
Period6/4/126/6/12

All Science Journal Classification (ASJC) codes

  • Industrial and Manufacturing Engineering
  • Electrical and Electronic Engineering

Fingerprint Dive into the research topics of 'Agent-based optimization of emulations of network server applications in honeypots'. Together they form a unique fingerprint.

Cite this