HoneyBow: An automated malware collection tool based on the high-interaction honeypot principle

Tongxin Xuebao/Journal on Communications

Volumn 28, Issue 12, 2007, Pages 8-13

  Zhuge, Jian Wei ^a   Han, Xin Hui ^a   Zhou, Yong Lin ^b   Song, Cheng Yu ^a   Guo, Jin Peng ^a   Zou, Wei ^a  

^a PEKING UNIVERSITY   (China)

^b NATIONAL COMPUTER NETWORK EMERGENCY RESPONSE TECHNICAL TEAM COORDINATION CENTER OF CHINA   (China)

Author keywords

Honeynet; Honeypot; Malware; Malware collection

Indexed keywords

HIGH INTERACTION; HONEYNET; HONEYPOT; MALWARE COLLECTION; NEPENTHES PLATFORMS;

CODES (SYMBOLS); COMPUTER WORMS; INTERACTIVE COMPUTER SYSTEMS; INTRUSION DETECTION;

INTERNET;

EID: 39749199168     PISSN: 1000436X     EISSN: None     Source Type: Journal    
DOI: None     Document Type: Article

References (7)

1. BAECHER P, HOLZ T, KOETTER M, et al. Know your enemy: Tracking botnets, using honeynets to learn more about bots [EB/OL]. http://www.honeynet.org/papers/bots/, 2005. Accessed March 2007.
2. WATSON D, HOLZ T, MUELLER S. Know your enemy: Phishing [EB/OL]. http://www.honeynet.org/papers/phishing/, 2005. Accessed March 2007.
3. PROVOS N. A virtual honeypot framework [A]. Proceedings of 13th USENIX Security Symposium [C]. San Diego, CA, USA, 2004. 1-14.
4. BALAS E, VIECCO C. Towards a third generation data capture architecture for honeynets [A]. Proceedings of the 6th IEEE Information Assurance Workshop [C]. West Point, NY, USA, 2005.
5. BAECHER P, KOETTER M, HOLZ T, et al. The nepenthes platform: An efficient approach to collect malware [J]. Lecture Notes in Computer Science 4219, 2006, 165-184.
6. ZIMMER D. Multipot [EB/OL]. http://labs.idefense.com/software/malcode.php, 2006. Accessed March 2007.
7. LEVINE J, GRIZZARD J, OWEN H. Application of a methodology to characterize rootkits retrieved from honeynets [A]. Proceedings of the Fifth Annual Information Assurance Workshop [C]. West Point, NY, USA, 2004. 15-21.