loading
Papers Papers/2022 Papers Papers/2022

Research.Publish.Connect.

Paper

Paper Unlock

Authors: Patrice Clemente 1 ; Jean-Francois Lalande 1 and Jonathan Rouzaud-Cornabas 2

Affiliations: 1 ENSI de Bourges and LIFO, France ; 2 INRIA and ENS Lyon, France

Keyword(s): Honeypot, Cloud Computing, Security.

Related Ontology Subjects/Areas/Topics: Data and Application Security and Privacy ; Information and Systems Security ; Intrusion Detection & Prevention ; Secure Cloud Computing

Abstract: This paper presents HoneyCloud: a large-scale high-interaction honeypots architecture based on a cloud infrastructure. The paper shows how to setup and deploy on-demand virtualized honeypot hosts on a private cloud. Each attacker is elastically assigned to a new virtual honeypot instance. HoneyCloud offers a high scalability. With a small number of public IP addresses, HoneyCloud can multiplex thousands of attackers. The attacker can perform malicious activities on the honeypot and launch new attacks from the compromised host. The HoneyCloud architecture is designed to collect operating system logs about attacks, from various IDS, tools and sensors. Each virtual honeypot instance includes network and especially system sensors that gather more useful information than traditional network oriented honeypots. The paper shows how are collected the activities of attackers into the cloud storage mechanism for further forensics. HoneyCloud also addresses efficient attacker’s session storage, long term session management, isolation between attackers and fidelity of hosts. (More)

CC BY-NC-ND 4.0

Sign In Guest: Register as new SciTePress user now for free.

Sign In SciTePress user: please login.

PDF ImageMy Papers

You are not signed in, therefore limits apply to your IP address 3.20.238.187

In the current month:
Recent papers: 100 available of 100 total
2+ years older papers: 200 available of 200 total

Paper citation in several formats:
Clemente, P.; Lalande, J. and Rouzaud-Cornabas, J. (2012). HoneyCloud: Elastic Honeypots - On-attack Provisioning of High-interaction Honeypots. In Proceedings of the International Conference on Security and Cryptography (ICETE 2012) - SECRYPT; ISBN 978-989-8565-24-2; ISSN 2184-3236, SciTePress, pages 434-439. DOI: 10.5220/0004129604340439

@conference{secrypt12,
author={Patrice Clemente. and Jean{-}Francois Lalande. and Jonathan Rouzaud{-}Cornabas.},
title={HoneyCloud: Elastic Honeypots - On-attack Provisioning of High-interaction Honeypots},
booktitle={Proceedings of the International Conference on Security and Cryptography (ICETE 2012) - SECRYPT},
year={2012},
pages={434-439},
publisher={SciTePress},
organization={INSTICC},
doi={10.5220/0004129604340439},
isbn={978-989-8565-24-2},
issn={2184-3236},
}

TY - CONF

JO - Proceedings of the International Conference on Security and Cryptography (ICETE 2012) - SECRYPT
TI - HoneyCloud: Elastic Honeypots - On-attack Provisioning of High-interaction Honeypots
SN - 978-989-8565-24-2
IS - 2184-3236
AU - Clemente, P.
AU - Lalande, J.
AU - Rouzaud-Cornabas, J.
PY - 2012
SP - 434
EP - 439
DO - 10.5220/0004129604340439
PB - SciTePress