Abstract <p>The principles of construction and operation of honeypot systems are studied. Existing detection methods are analyzed, and their advantages and disadvantages are highlighted. A detection method based on the analysis of command execution delays is proposed. A universal detection method based on combining the results of the methods is proposed. A software prototype of the detection system is developed and tested.</p>

错误:搜索内容不能为空,请输入英文关键词
错误:关键词超出字数限制,请精简
高级检索

Detection of Honeypot Systems Based on a Comprehensive Analysis of Node Performance Indicators

  • T. D. Ovasapyan,
  • D. A. Ponomarev,
  • D. V. Ivanov,
  • E. V. Zavadskii

摘要

Abstract

The principles of construction and operation of honeypot systems are studied. Existing detection methods are analyzed, and their advantages and disadvantages are highlighted. A detection method based on the analysis of command execution delays is proposed. A universal detection method based on combining the results of the methods is proposed. A software prototype of the detection system is developed and tested.