한국정보처리학회:학술대회논문집 (Proceedings of the Korea Information Processing Society Conference)
- 한국정보처리학회 2007년도 춘계학술발표대회
- /
- Pages.1093-1095
- /
- 2007
- /
- 2005-0011(pISSN)
- /
- 2671-7298(eISSN)
A Novel Architecture for Real-time Automated Intrusion Detection Fingerprinting using Honeypot
- Siddiqui, Muhammad Shoaib (Dept. of Computer Engineering, Kyung Hee University) ;
- Hong, Choong-Seon (Dept. of Computer Engineering, Kyung Hee UniversityHoneypot)
- 발행 : 2007.05.11
초록
As the networking and data communication technology is making progress, there has been an augmented concern about the security. Intrusion Detection and Prevention Systems have long being providing a reliable layer in the field of Network Security. Intrusion Detection System works on analyzing the traffic and finding a known intrusion or attack pattern in that traffic. But as the new technology provides betterment for the world of the Internet; it also provides new and efficient ways for hacker to intrude in the system. Hence, these patterns on which IDS & IPS work need to be updated. For detecting the power and knowledge of attackers we sometimes make use of Honey-pots. In this paper, we propose a Honey-pot architecture that automatically updates the Intrusion's Signature Knowledge Base of the IDS in a Network.
키워드