IAWorkshop 2006 - Network based detection of virtual environments and low interaction honeypots

7^th Annual IEEE Information Assurance Workshop

21-23 June 2006

"The West Point Workshop"

United States Military Academy, West Point, New York

Chair: LTC Ronald Dodge, Ronald.Dodge@usma.edu	http://www.itoc.usma.edu/workshop/2006

Network based detection of virtual environments and low interaction honeypots

Srinivas Mukkamala

The 7th IEEE Information Assurance Workshop (IAWorkshop 2006)
West Point, New York, USA, June 21-23, 2006

Abstract

To detect and deflect attempts at unauthorized use of information systems, network resources called honeypots are deployed. Honeypots are an efficient way to gather information and are being increasingly used for information security purposes.

This paper focuses on the network level detection of honeypots by taking the feature set of the systems and also the network level activity into consideration. Earlier work in the area has been based on the system level detection. The results aim at bringing out the limitations in the current honeypot technology.

START Conference Manager (V2.52.3)

Maintainer: rrgerber@softconf.com

The IEEE Information Assurance Workshop is sponsored by the IEEE Systems Man and Cybernetics Society, supported by the National Security Agency, and hosted by the Information Technology Operations Center, Department of Electrical Engineering and Computer Science, at the United States Military Academy, West Point, New York.