Collection and Analysis of attack data based on Honeypots deployed on the Internet

Advances in Information Security

Volumn 23, Issue , 2006, Pages 79-91

  Alata, E ^a   Dacier, M ^b   Deswarte, Y ^a   Kaaaniche M ^a   Kortchinsky, K ^c   Nicomette, V ^a   Pham, V H ^a   Pouget, F ^b  

^a LAAS CNRS   (France)

^b EURECOM   (France)

^c ARTS ET MÉTIERS PARISTECH   (France)

Author keywords

[No Author keywords available]

Indexed keywords

EID: 77958132042     PISSN: 15682633     EISSN: None     Source Type: Book Series    
DOI: 10.1007/978-0-387-36584-8_7     Document Type: Article

References (23)

1. ACI "S6curit6 et Informatique, " http://acisi.loria.fr/
2. M. Bailey, E. Cooke, F. Jahanian, J. Nazario, and D. Watson, "The Internet Motion Sensor: A Distributed Blackhole Monitoring System, " Proc. 12th Annual Network and Distributed System Security Symposium (NDSS), San Diego, CA, Feb. 2005.
3. Home Page of the CAIDA Project, http://www.caida.org/, last visited 06/2005
4. DShield Distributed Detection System homepage, http://www.honeynet.org/, last visited 06/2005
5. L. Spitzner, Honeypots: Tracking Hackers, Addison-Wesley, ISBN from-321-10895-7, 2002
6. Home Page of the Honeynet Project, http://www.honeynet.org/, last visited 06/2005
7. Home page of the French Honeynet Project, http://honeynet.rstack.org/
8. VMWARE, Home page, http://www.vmware.com/
9. Honeyd Home page, http://www.citi.umich.edu/u/provos/honeyd/
10. pof passive fingerprinting tool homepage, http://lcamtuf.coredump.cx/p0f-beta.tgz
11. The ettercap tool home page, http://ettercap.sourceforge.net/
12. The Disco tool home page, http://www.altmode.com/disco/
13. MaxMind GeoIP Country Database Commercial Product: http://www.maxmind.com/app/products/
14. F. Pouget, Publications web page, http://www.eurecom.fr/pouget/papers.htm
15. M. Dacier, F. Pouget, H. Debar, "Honeypots: Practical Means to Validate Malicious Fault Assumptions on the Internet, " Proc. 10th IEEE International Symposium Pacific Rim Dependable Computing (PRDC10), Tahiti, March 2004, pages 383-388.
16. M. Dacier, F. Pouget, H. Debar, "Attack Processes found on the Internet, " Proc. OTAN Symposium on Adaptive Defense in Unclassified Networks, Toulouse, France, April 2004.
17. F. Pouget, M. Dacier, "Honeypot-based Forensics, " Proc. AusCERT Asia Pacific Information Technology Security Conference (AusCERT2004), Brisbane (Australia), May 2004.
18. F. Pouget, M. Dacier, V. H. Pham, "Towards a Better Understanding of Internet Threats to Enhance Survivability, " Proc. International Infrastructure Survivability Workshop (IISW04), Lisbon (Portugal), December 2004.
19. F. Pouget, T. Hoiz, "A Pointillist Approach for Comparing Honeypots, " Proc. Conference on Detection of Intrusions and Malware & Vulnerability Assessment (DIMVA 2005), Vienna (Austria), July 2005.
20. F. Pouget, M. Dacier, V. H. Pham, "Leurr6. com: On the Advantages of Deploying a Large Scale Distributed Honeypot Platform, " Proc. E-Crime and Computer Evidence Conference (ECCE 2005), Monaco, Mars 2005.
21. K. Kanoun, M. Kafiniche, J-C. Laprie, "Qualitative and Quantitative Reliability Assessment, " IEEE Software, Vol. 14, n2, pages 74-86, 1997.
22. M. Dacier, Y. Deswarte, M. Kaâniche, "Models and tools for quantitative assessment of operational security, " Proc. 12th International Information Security Conference (IFIP SEC'96), Samos (Greece), May 1996, pages 177-186
23. R. Ortalo, Y. Deswarte, M. Kafiniche, "Experimenting with Quantitative Evaluation Tools for Monitoring Operational Security, " IEEE Transactions on Software Engineering, Vol.25, N5, pages 633-650, September/October 1999.