Approaches for Preventing Honeypot Detection and Compromise

Michail Tsikerdekis; Sherali Zeadally; Amy Schlesener; Nicolas Sklavos

doi:10.1109/GIIS.2018.8635603

Approaches for Preventing Honeypot Detection and Compromise

Michail Tsikerdekis, Sherali Zeadally, Amy Schlesener, Nicolas Sklavos

School of Information Science

Research output: Chapter in Book/Report/Conference proceeding › Conference contribution › peer-review

24 Scopus citations

Abstract

Honeypots have been used extensively for over two decades. However, their development is rarely accompanied with an understanding of how attackers are able to detect them. Further, our understanding of effective evasion strategies that prevent the detection of honeypots is limited. We present a classification of honeypot characteristics as well as honeypot detection evasion strategies which minimize the detection rates of honeypots. We also provide recommendations for future honeypot software which is more adaptable, modular and incorporate a dynamic intelligence design.

Original language	English
Title of host publication	2018 Global Information Infrastructure and Networking Symposium, GIIS 2018
ISBN (Electronic)	9781538672723
DOIs	https://doi.org/10.1109/GIIS.2018.8635603
State	Published - Jul 2 2018
Event	2018 Global Information Infrastructure and Networking Symposium, GIIS 2018 - Thessaloniki, Greece Duration: Oct 23 2018 → Oct 25 2018

Publication series

Name	2018 Global Information Infrastructure and Networking Symposium, GIIS 2018

Conference

Conference	2018 Global Information Infrastructure and Networking Symposium, GIIS 2018
Country/Territory	Greece
City	Thessaloniki
Period	10/23/18 → 10/25/18

Bibliographical note

Publisher Copyright:
© 2018 IEEE.

Keywords

Detection
honeypot
protocol
security

ASJC Scopus subject areas

Computer Networks and Communications
Hardware and Architecture
Information Systems
Information Systems and Management

Access to Document

10.1109/GIIS.2018.8635603

Cite this

@inproceedings{2f73fb3e36fa4827bcb242c4a65baa94,

title = "Approaches for Preventing Honeypot Detection and Compromise",

abstract = "Honeypots have been used extensively for over two decades. However, their development is rarely accompanied with an understanding of how attackers are able to detect them. Further, our understanding of effective evasion strategies that prevent the detection of honeypots is limited. We present a classification of honeypot characteristics as well as honeypot detection evasion strategies which minimize the detection rates of honeypots. We also provide recommendations for future honeypot software which is more adaptable, modular and incorporate a dynamic intelligence design.",

keywords = "Detection, honeypot, protocol, security",

author = "Michail Tsikerdekis and Sherali Zeadally and Amy Schlesener and Nicolas Sklavos",

note = "Publisher Copyright: {\textcopyright} 2018 IEEE.; 2018 Global Information Infrastructure and Networking Symposium, GIIS 2018 ; Conference date: 23-10-2018 Through 25-10-2018",

year = "2018",

month = jul,

day = "2",

doi = "10.1109/GIIS.2018.8635603",

language = "English",

series = "2018 Global Information Infrastructure and Networking Symposium, GIIS 2018",

booktitle = "2018 Global Information Infrastructure and Networking Symposium, GIIS 2018",

}

Tsikerdekis, M, Zeadally, S, Schlesener, A & Sklavos, N 2018, Approaches for Preventing Honeypot Detection and Compromise. in 2018 Global Information Infrastructure and Networking Symposium, GIIS 2018., 8635603, 2018 Global Information Infrastructure and Networking Symposium, GIIS 2018, 2018 Global Information Infrastructure and Networking Symposium, GIIS 2018, Thessaloniki, Greece, 10/23/18. https://doi.org/10.1109/GIIS.2018.8635603

Approaches for Preventing Honeypot Detection and Compromise. / Tsikerdekis, Michail; Zeadally, Sherali; Schlesener, Amy et al.
2018 Global Information Infrastructure and Networking Symposium, GIIS 2018. 2018. 8635603 (2018 Global Information Infrastructure and Networking Symposium, GIIS 2018).

Research output: Chapter in Book/Report/Conference proceeding › Conference contribution › peer-review

TY - GEN

T1 - Approaches for Preventing Honeypot Detection and Compromise

AU - Tsikerdekis, Michail

AU - Zeadally, Sherali

AU - Schlesener, Amy

AU - Sklavos, Nicolas

PY - 2018/7/2

Y1 - 2018/7/2

N2 - Honeypots have been used extensively for over two decades. However, their development is rarely accompanied with an understanding of how attackers are able to detect them. Further, our understanding of effective evasion strategies that prevent the detection of honeypots is limited. We present a classification of honeypot characteristics as well as honeypot detection evasion strategies which minimize the detection rates of honeypots. We also provide recommendations for future honeypot software which is more adaptable, modular and incorporate a dynamic intelligence design.

AB - Honeypots have been used extensively for over two decades. However, their development is rarely accompanied with an understanding of how attackers are able to detect them. Further, our understanding of effective evasion strategies that prevent the detection of honeypots is limited. We present a classification of honeypot characteristics as well as honeypot detection evasion strategies which minimize the detection rates of honeypots. We also provide recommendations for future honeypot software which is more adaptable, modular and incorporate a dynamic intelligence design.

KW - Detection

KW - honeypot

KW - protocol

KW - security

UR - http://www.scopus.com/inward/record.url?scp=85062870142&partnerID=8YFLogxK

UR - http://www.scopus.com/inward/citedby.url?scp=85062870142&partnerID=8YFLogxK

U2 - 10.1109/GIIS.2018.8635603

DO - 10.1109/GIIS.2018.8635603

M3 - Conference contribution

AN - SCOPUS:85062870142

T3 - 2018 Global Information Infrastructure and Networking Symposium, GIIS 2018

BT - 2018 Global Information Infrastructure and Networking Symposium, GIIS 2018

T2 - 2018 Global Information Infrastructure and Networking Symposium, GIIS 2018

Y2 - 23 October 2018 through 25 October 2018

ER -

Approaches for Preventing Honeypot Detection and Compromise

Abstract

Publication series

Conference

Bibliographical note

Keywords

ASJC Scopus subject areas

Access to Document

Other files and links

Fingerprint

Cite this