仮想サーバ環境を利用したスケーラブルなハニーファームの開発

概要

論文の詳細を見る
The idea called honeyfarm is proposed to extend the limited scope of honeypots. It is configured so that illegal accesses are gathered to a special network(honeyfarm) where honeypots are waiting. In a honeyfarm, honeypots must wait for access to very large area of address space, but it isn't cost effective to employ large number of honeypots. In this paper, we propose a reasonable honeyfarm system that uses a technology called virtual server environment. The heart of our approach is on-demand resource assignment, the server address is assigned when it is accessed, and file systems are shared with copy-on-write differences. We have built an experimental system, which can respond to the access for more than one hundred different addresses.
拓殖大学の論文
2006-10-20