Honeynet optimization strategy based on attack graph

Zhang Sheng Yang; Hong Ling Li; Zhe Yang; Liu Zhi Ye

doi:10.1117/12.2679157

12 May 2023 Honeynet optimization strategy based on attack graph

Zhang Sheng Yang, Hong Ling Li, Zhe Yang, Liu Zhi Ye

Proceedings Volume 12641, International Conference on Cryptography, Network Security, and Communication Technology (CNSCT 2023); 1264105 (2023) https://doi.org/10.1117/12.2679157
Event: International Conference on Cryptography, Network Security, and Communication Technology (CNSCT 2023), 2023, Changsha, China

Abstract

Honeypot is an active defense mechanism in network security protection. Its main purpose is to collect various intrusion information. However, due to the complexity of attacker penetration attacks and the diversity of host vulnerabilities, a simple honeypot can’t to meet the defense requirements, so a honeynet system formed by a combination of various honeypots has emerged. But what kind of honeypots are included in the honeynet? How are honeypots connected? What is the reasonable size of the honeynet? These problems are restricting the development of honeynet. Therefore, the research of this paper is to analyze the vulnerability of an nodes in the network by establishing an attack graph, so as to formulate a honeynet deployment strategy. However, due to the difference in the network structure and the size of the honeynet, the effect of security protection will be very different. At the same time, considering the maintenance cost and protection benefits of the honeynet, when adopting a dynamic honeynet deployment method, we need to adjust the type and number of honeypots in the honeynet at any time. This paper uses ant colony algorithm and wolf swarm algorithm to optimize the honeynet, so as to realize the simplification of the attack graph and the dynamic configuration of the honeynet.

Citation Download Citation

Zhang Sheng Yang, Hong Ling Li, Zhe Yang, and Liu Zhi Ye "Honeynet optimization strategy based on attack graph", Proc. SPIE 12641, International Conference on Cryptography, Network Security, and Communication Technology (CNSCT 2023), 1264105 (12 May 2023); https://doi.org/10.1117/12.2679157

ACCESS THE FULL ARTICLE

INSTITUTIONAL
Select your institution to access the SPIE Digital Library.

SELECT YOUR INSTITUTION

PERSONAL
Sign in with your SPIE account to access your personal subscriptions or to use specific features such as save to my library, sign up for alerts, save searches, etc.

PERSONAL SIGN IN

No SPIE Account? Create one

PURCHASE THIS CONTENT

SUBSCRIBE TO DIGITAL LIBRARY

50 downloads per 1-year subscription

Members: $195

Non-members: $335 ADD TO CART

25 downloads per 1 - year subscription

Members: $145

Non-members: $250 ADD TO CART

PURCHASE SINGLE ARTICLE

Includes PDF, HTML & Video, when available