A honeynet within the German research network - Experiences and results

Lecture Notes in Informatics (LNI), Proceedings - Series of the Gesellschaft fur Informatik (GI)

Volumn P 46, Issue , 2004, Pages 113-128

  Reiser, Helmut ^a   Volker, Gereon ^b  

^a UNIVERSITY OF MUNICH   (Germany)

^b TECHNICAL UNIVERSITY OF MUNICH   (Germany)

Author keywords

[No Author keywords available]

Indexed keywords

HONEYNET; OPERATION PHASE; RESEARCH NETWORKS;

MALWARE;

EID: 84892794675     PISSN: 16175468     EISSN: None     Source Type: Conference Proceeding    
DOI: None     Document Type: Conference Paper

References (32)

1. ACID. http://acidlab.sourceforge.net/.
2. Adore rootkit. https://www.team- teso.net/releases/adore- 0.39b4. tgz.
3. CERT Advisory CA-2003-20 W32/Blaster worm. http://www.cert.org/advisories/CA- 2003- 20.html.
4. ComLog. http://www.geocities.com/floydian_99/comlog.html.
5. Code Red2 Analyse und Gegenmassnahmen. http://www.dfn-cert.de/dfn/bt/2001/bt-2001-codered.pdf.
6. Doyle, B. Passive Fingerprinting Utilizing the Telnet Protocol Negotiation data. http://www.sans.org/resources/idfaq/fingerp_telnet.php.
7. Ethereal. http://www.ethereal.com/.
8. Eventlog to Syslog Utility. https://engineering.purdue.edu/ECN/Resources/Documents/UNIX/evtsys.
9. Fighting Relay Spam the Honeypot Way. http://www.tracking-hackers.com/solutions/sendmail.html.
10. FX Scanner. http://www.der-klan.de/tools/scanner.html.
11. Hegering, H.-G., Abeck, S., und Neumair, B.: Integrated Management of Networked Systems - Concepts, Architectures and their Operational Application. Morgan Kaufmann Publishers, ISBN 1-55860-571-1. January 1999. 651 p.
12. Honeynet Project (Hrsg.): Know Your Enemy: Revealing the Security Tools, Tactics, and Motives of the Blackhat Community. Addison-Wesley. 2001.
13. Honeyd. http://www.honeyd.org.
14. The Honeynet Project. www.honeynet.org.
15. The Honeynet Project: Frequently Asked Questions. http://www.honeynet.org/misc/faq.html.
16. Intrusec Alert: 55808 Trojan Analysis. http://www.intrusec.com/55808.html.
17. iptables. http://www.netfilter.org/.
18. iptables log. http://www.gege.org/iptables/.
19. “Stumbler” Distributed Stealth Scanning Network. http://www.iss.net/issEn/delivery/xforce/alertdetail.jsp?oid=22441.
20. Einschränkungen und Regeln im Netzbetrieb. http://www.lrz-muenchen.de/services/netz/einschraenkung/.
21. McCarty, B.: The Honeynet Arms Race. IEEE Security and Privacy. 1(6). December 2003.
22. P0f. http://lcamtuf.coredump.cx/p0f.shtml.
23. Packetyzer. http://www.networkchemistry.com/products/packetyzer/.
24. Bubblegum proxypot. http://world.std.com/pacman/proxypot.html.
25. Know Your Enemy: Sebek2. http://www.honeynet.org/papers/sebek.pdf.
26. Snort - The Open Source Network Intrusion Detection System. http://www.snort.org.
27. Snort inline. http://sourceforge.net/projects/snort-inline/.
28. Spitzner, L.: The Honeynet Project: Trapping the Hackers. IEEE Security and Privacy. 1(2). March 2003.
29. Swatch. http://swatch.sourceforge.net/.
30. W32.HLLW.Gaobot.AA. http://www.symantec.com/avcenter/venc/data/w32.hllw.gaobot.aa.html.
31. tcpdump. http://www.tcpdump.org/.
32. Visualroute. http://www.visualroute.com/.