Enhanced attack collection scheme on high-interaction web honeypots

Proceedings - IEEE Symposium on Computers and Communications

Volumn , Issue , 2010, Pages 81-86

  Yagi, Takeshi ^a   Tanimoto, Naoto ^a   Hariu, Takeo ^a   Itoh, Mitsutaka ^a  

^a NTT CORPORATION   (Japan)

Author keywords

Honeypot; Malware; Path; Security; URL; Web

Indexed keywords

HONEYPOTS; MALWARES; PATH; SECURITY; URL; WEB;

INFORMATION USE; INTERNET; SECURITY OF DATA; WORLD WIDE WEB;

COMPUTER CRIME;

EID: 77956533061     PISSN: 15301346     EISSN: None     Source Type: Conference Proceeding    
DOI: 10.1109/ISCC.2010.5546700     Document Type: Conference Paper

References (15)

1. Syamtec, "Attacks increasingly target trusted web sites: http://www.symantec.com/business/resources/articles/article.jsp?aid= 20080513-sym-report-attacks-increasingly.
2. C. Kruegel and G. Vigna, "Anomaly detection of webbased attacks," Proceedings of the 10th ACM conference on Computer and communications security, Oct. 2003.
3. J. M.Estevez-Tapiador, P. Garcia-Teodoro, and J. E.Diaz- Verdejo, "Detection of web-based attacks through markovian protocol parsing," Proceedings of the 10th IEEE Symposium on Computer and communications, Oct. 2005.
4. The Honeynet Project, "About The Honeynet Project," http://www.honeynet.org/about.
5. N.Dagdee and U.Thakar, "Intrusion attack pattern analysis and signature extraction for web services using honeypots," First International Conference on Emerging Trends in Engineering and Technology, Jul. 2008.
6. D.Watson and J.Riden, "The honeynet project: Data collection tools, infrastructure, archives and analysis," WOMBAT Workshop on Information Security Threats Data Collection and Sharing, Apr. 2008.
7. R. Y.Mai and X.Su, "J-honeypot:a java-based network deception tool with monitoring and intrusion detection," International Conference on Information Technology: Coding and Computing, Apr. 2004.
8. Chicago Honeynet Project, "The Google Hack Honeypot,"http:// ghh.sourceforge.net/.
9. The Honeynet Project, "Web Applicaton Honeypot," http://www.honeynet.org/gsoc/project8.
10. The German Honeynet Project, "HIHAT," http://www.honeynet.org/ project/HIHAT.
11. T. M.Muter, F.Freiling and J.Matthews, "A generic toolkit for converting web applications into high-interaction honeypots," http://people.clarkson.edu/~jnm/publications/honeypot-raid2007.pdf.
12. A. Chris, "Advanced sql injection in sql server applications," An NGSSoftware Insight Security Research (NISR) Publication, 2002.
13. HTTP Service Project, "Cross Site Scripting Info," http://httpd.apache.org/info/css-security/
14. H. F. G. Robledo, "Type of hosts on remote file inclusion (rfi) botnet," The Electronics, Robotics and Automotive Mechanics Conference (CERMA) 2008, Sep. 2008.
15. OWASP, "2007 OWASP Top 10 Most Critical Web Application Security Vulnerabilities," http://www.owasp.org/images/f/fb/OWASP-TOP-10-2007-v6. ppt.