Agent-based optimization of emulations of network server applications in honeypots

Yilun Zhao; Jeremy J. Blum

doi:10.1109/ISCE.2012.6241709

Agent-based optimization of emulations of network server applications in honeypots

Yilun Zhao, Jeremy J. Blum

School of Science, Engineering & Technology (Harrisburg)

Research output: Chapter in Book/Report/Conference proceeding › Conference contribution

1 Scopus citations

Abstract

Low-interaction honeypots can provide a cost-effective security mechanism for a wide range of computer systems. A central challenge in the development of low-interaction honeypots is the development of emulation programs that mimic the action of server applications on the target platform. The emulation programs must be of high enough fidelity to fool attackers. However, the manual development of these emulations is extremely time-consuming. This paper describes an agent-based optimization system that can automate the generation of emulation programs for honeypots. The system is evaluated in its ability to emulate a mail server. In this evaluation, the system produced correct responses to more than 99% of test data queries.

Original language	English (US)
Title of host publication	2012 IEEE 16th International Symposium on Consumer Electronics, ISCE 2012
DOIs	https://doi.org/10.1109/ISCE.2012.6241709
State	Published - 2012
Event	2012 IEEE 16th International Symposium on Consumer Electronics, ISCE 2012 - Harrisburg, PA, United States Duration: Jun 4 2012 → Jun 6 2012

Publication series

Name	Digest of Technical Papers - IEEE International Conference on Consumer Electronics
ISSN (Print)	0747-668X

Other

Other	2012 IEEE 16th International Symposium on Consumer Electronics, ISCE 2012
Country/Territory	United States
City	Harrisburg, PA
Period	6/4/12 → 6/6/12

All Science Journal Classification (ASJC) codes

Industrial and Manufacturing Engineering
Electrical and Electronic Engineering

Access to Document

10.1109/ISCE.2012.6241709

Cite this

@inproceedings{08e4f11d7eca4184aa8481dcdd4b0437,

title = "Agent-based optimization of emulations of network server applications in honeypots",

abstract = "Low-interaction honeypots can provide a cost-effective security mechanism for a wide range of computer systems. A central challenge in the development of low-interaction honeypots is the development of emulation programs that mimic the action of server applications on the target platform. The emulation programs must be of high enough fidelity to fool attackers. However, the manual development of these emulations is extremely time-consuming. This paper describes an agent-based optimization system that can automate the generation of emulation programs for honeypots. The system is evaluated in its ability to emulate a mail server. In this evaluation, the system produced correct responses to more than 99% of test data queries.",

author = "Yilun Zhao and Blum, {Jeremy J.}",

year = "2012",

doi = "10.1109/ISCE.2012.6241709",

language = "English (US)",

isbn = "9781467313544",

series = "Digest of Technical Papers - IEEE International Conference on Consumer Electronics",

booktitle = "2012 IEEE 16th International Symposium on Consumer Electronics, ISCE 2012",

note = "2012 IEEE 16th International Symposium on Consumer Electronics, ISCE 2012 ; Conference date: 04-06-2012 Through 06-06-2012",

}

Zhao, Y & Blum, JJ 2012, Agent-based optimization of emulations of network server applications in honeypots. in 2012 IEEE 16th International Symposium on Consumer Electronics, ISCE 2012., 6241709, Digest of Technical Papers - IEEE International Conference on Consumer Electronics, 2012 IEEE 16th International Symposium on Consumer Electronics, ISCE 2012, Harrisburg, PA, United States, 6/4/12. https://doi.org/10.1109/ISCE.2012.6241709

Agent-based optimization of emulations of network server applications in honeypots. / Zhao, Yilun; Blum, Jeremy J.
2012 IEEE 16th International Symposium on Consumer Electronics, ISCE 2012. 2012. 6241709 (Digest of Technical Papers - IEEE International Conference on Consumer Electronics).

Research output: Chapter in Book/Report/Conference proceeding › Conference contribution

TY - GEN

T1 - Agent-based optimization of emulations of network server applications in honeypots

AU - Zhao, Yilun

AU - Blum, Jeremy J.

PY - 2012

Y1 - 2012

N2 - Low-interaction honeypots can provide a cost-effective security mechanism for a wide range of computer systems. A central challenge in the development of low-interaction honeypots is the development of emulation programs that mimic the action of server applications on the target platform. The emulation programs must be of high enough fidelity to fool attackers. However, the manual development of these emulations is extremely time-consuming. This paper describes an agent-based optimization system that can automate the generation of emulation programs for honeypots. The system is evaluated in its ability to emulate a mail server. In this evaluation, the system produced correct responses to more than 99% of test data queries.

AB - Low-interaction honeypots can provide a cost-effective security mechanism for a wide range of computer systems. A central challenge in the development of low-interaction honeypots is the development of emulation programs that mimic the action of server applications on the target platform. The emulation programs must be of high enough fidelity to fool attackers. However, the manual development of these emulations is extremely time-consuming. This paper describes an agent-based optimization system that can automate the generation of emulation programs for honeypots. The system is evaluated in its ability to emulate a mail server. In this evaluation, the system produced correct responses to more than 99% of test data queries.

UR - http://www.scopus.com/inward/record.url?scp=84866514566&partnerID=8YFLogxK

UR - http://www.scopus.com/inward/citedby.url?scp=84866514566&partnerID=8YFLogxK

U2 - 10.1109/ISCE.2012.6241709

DO - 10.1109/ISCE.2012.6241709

M3 - Conference contribution

AN - SCOPUS:84866514566

SN - 9781467313544

T3 - Digest of Technical Papers - IEEE International Conference on Consumer Electronics

BT - 2012 IEEE 16th International Symposium on Consumer Electronics, ISCE 2012

T2 - 2012 IEEE 16th International Symposium on Consumer Electronics, ISCE 2012

Y2 - 4 June 2012 through 6 June 2012

ER -

Agent-based optimization of emulations of network server applications in honeypots

Abstract

Publication series

Other

All Science Journal Classification (ASJC) codes

Access to Document

Other files and links

Fingerprint

Cite this