Honey@home: A new approach to large-scale threat monitoring

Proceedings - WOMBAT Workshop on Information Security Threats Data Collection and Sharing, WISTDCS 2008

Volumn , Issue , 2008, Pages 3-16

  Antonatos, S ^a   Athanatos, M ^a   Kondaxis, G ^a   Velegrakis, J ^a   Hatzibodozis, N ^a   Ioannidis, S ^a   Markatos, E P ^a  

^a INSTITUTE OF COMPUTER SCIENCE   (Greece)

Author keywords

[No Author keywords available]

Indexed keywords

DATA ACQUISITION; INTERNET; INTERNET SERVICE PROVIDERS; NETWORK ARCHITECTURE; SECURITY SYSTEMS; TECHNICAL PRESENTATIONS;

DESIGN ISSUES; DETECTING ATTACKS; FALSE POSITIVES; HONEY POTS; HONEYPOT; INFRA STRUCTURES; IP ADDRESSES; LOW COSTS; NETWORK ADDRESSES; NEW APPROACHES;

SECURITY OF DATA;

EID: 55149113904     PISSN: None     EISSN: None     Source Type: Conference Proceeding    
DOI: 10.1109/WISTDCS.2008.15     Document Type: Conference Paper

References (27)

1. Dshield.org, distributed intrusion detection system. http://www. dshield.org.
2. Honeynet project. http://www.honeynet.org.
3. Qemu data handling multiple command execution and denial of service vulnerabilities. http://www.frsirt.com/english/advisories/2007/1597.
4. Sebek homepage. http://www.honeynet.org/tools/sebek/.
5. Upnp forum. http://www.upnp.org.
6. User-mode linux. http://user-modelinux.sourceforge.net/.
7. E. Athanasopoulos and S. Antonatos. Enhanced captchas: Using animation to tell humans and computers apart. In Proceedings of the 10th IFIP Open Conference on Communications and Multimedia Security, October 2006.
8. th ISOC Symposium, on Network and Distributed Systems Security (SNDSS), pages 167-179, February 2005.
9. M. Bailey, E. Cooke, D. Watson, F. Jahanian, and N. Provos. A hybrid honeypot architecture for scalable network monitoring. In CSE-TR-499-04.
10. th USENIX Security Symposium, pages 193-208, August 2005.
11. M. Bhattacharyya, M. G. Schultz, E. Eskin, S. Hershkop, and S. J. Stolfo. MET: An Experimental System for Malicious Email Tracking. In Proceedings of the New Security Paradigms Workshop (NSPW), pages 1-12, September 2002.
12. M. Costa, J. Crowcroft, M. Castro, A. Rowstron, L. Zhou, L. Zhang, and P. Barham. Vigilante: End-to-end containment of internet worms. In Proceedings of the 20th ACM Symposium on Operating System Principles (SOSP), October 2005.
13. th International Symposium on Recent Advances in Intrusion Detection (RAID), pages 39-58, October 2004.
14. th Usenix Security Symposium, Aug. 2004.
15. th ACM Conference on Computer and Communications Security (CCS), pages 251-261, October 2003.
16. C. Leita, K. Mermoud, and M. Dacier. Script-gen: an automated script generation tool for honeyd. In 21st Annual Computer Security Applications Conference, December 2005.
17. G. Portokalidis, A. Slowinska, and H. Bos. Argos: an Emulator for Fingerprinting Zero-Day Attacks. In Proceedings of ACM SIGOPS Eurosys 2006, April 2006.
18. N. Provos. A virtual honeypot framework. In Proceedings of the 12th USENIX Security Symposium, pages 1-14, August 2003.
19. M. Roesch. Snort: Lightweight intrusion detection for networks. In Proceedings of USENIX LISA '99, November 1999. (software available from http://www.snort.org/).
20. th USENIX Security Symposium, pages 209-224, August 2005.
21. L. Spitzner. Honeypots: Tracking Hackers. Addison-Wesley, 2003.
22. S. Staniford, D. Moore, V. Paxson, and N. Weaver. The Top Speed of Flash Worms. In Proceedings of the ACM Workshop on Rapid Malcode (WORM), pages 33-42, October 2004.
23. S. Staniford, V. Paxson, and N. Weaver. How to Own the Internet in Your Spare Time. In Proceedings of the USENIX Security Symposium, pages 149-167, August 2002.
24. th Symposium on Recent Advances in Intrusion Detection (RAID), October 2002.
25. T. Toth and C. Kruegel. Connection-history Based Anomaly Detection. In Proceedings of the IEEE Workshop on Information Assurance and Security, June 2002.
26. D. X. Xuxian Jiang. Collapsar: A vm-based architecture for network attack detention center. In Proceedings of the 13th USENIX Security Symposium, pages 15-28, August 2004.
27. th International Symposium on Recent Advances in Intrusion Detection (RAID), pages 146-165, October 2004.