Collection and analysis of attack data based on honeypots deployed on the Internet - Archive ouverte HAL Accéder directement au contenu
Communication Dans Un Congrès Année : 2005

Collection and analysis of attack data based on honeypots deployed on the Internet

Résumé

The CADHo project (Collection and Analysis of Data from Honeypots) is an ongoing research action funded by the French ACI "Securité & Informatique" [1]. It aims at building an environment to better understand threats on the Internet and also at providing models to analyze the observed phenomena. Our approach consists in deploying and sharing with the scientific community a distributed platform based on honeypots that gathers data suitable to analyze the attack processes targeting machines connected to the Internet. This distributed platform, called Leurré.com and administrated by Institut Eurécom, offers each partner collaborating to this initiative access to all collected data in order to carry out statistical analyzes and modeling activities. So far, about thirty honeypots have been operational for several months in twenty countries of the five continents. This paper presents a brief overview of this distributed platform and examples of results derived from the data. It also outlines the approach investigated to model observed attack processes and to describe the intruders behaviors once they manage to get access to a target machine
Fichier principal
Vignette du fichier
Cadho05-QoP2005.pdf (310.13 Ko) Télécharger le fichier
Origine : Fichiers produits par l'(les) auteur(s)

Dates et versions

hal-00140390 , version 1 (06-04-2007)

Identifiants

  • HAL Id : hal-00140390 , version 1

Citer

Eric Alata, Marc Dacier, Yves Deswarte, Mohamed Kaâniche, Kostya Kortchinsky, et al.. Collection and analysis of attack data based on honeypots deployed on the Internet. Workshop on Quality of protection (QoP 2005), Security Measurements and Metrics, Sep 2005, France. pp.79-92. ⟨hal-00140390⟩
310 Consultations
430 Téléchargements

Partager

Gmail Facebook X LinkedIn More