Design and performance analysis of a SDN-based intelligent and collaborative Honeynet for mobile networks environment
In the mobile network environment,the mobile honeypot resources are limited and the attack injection means are flexible,so it is necessary to dynamically deploy the honeynet to collaboratively detect the attack behavior characteristics.However,existing honey nets are susceptible to feature recogniti...
Saved in:
Main Authors: | , , , , , |
---|---|
Format: | Article |
Language: | zho |
Published: |
Beijing Xintong Media Co., Ltd
2018-11-01
|
Series: | Dianxin kexue |
Subjects: | |
Online Access: | http://www.telecomsci.com/zh/article/doi/10.11959/j.issn.1000-0801.2018278/ |
Tags: |
Add Tag
No Tags, Be the first to tag this record!
|
_version_ | 1841530456759074816 |
---|---|
author | Liyue CHEN Yangdan NI Xiaoyun KONG Sheng ZHOU Hui HUANG Xing ZHENG |
author_facet | Liyue CHEN Yangdan NI Xiaoyun KONG Sheng ZHOU Hui HUANG Xing ZHENG |
author_sort | Liyue CHEN |
collection | DOAJ |
description | In the mobile network environment,the mobile honeypot resources are limited and the attack injection means are flexible,so it is necessary to dynamically deploy the honeynet to collaboratively detect the attack behavior characteristics.However,existing honey nets are susceptible to feature recognition attacks,malicious traffic within the network,and can’t be migrated across honeypots.Based on software defined networking (SDN) technology,an intelligent collaborative honeynet system (ic-Honeynet) was designed.It consisted of a reverse connection proxy module and a honeynet controller.Finally,an ic-Honeynet experimental environment was built and the effectiveness of the system was verified.The experimental results show that the throughput of the system is nearly linear,up to 8.23 Gbit/s; the additional increase in response delay is small,only in the range of 0.5 to 1.2 ms; the connection processing capability is also very strong,up to 1 473 connections/s. |
format | Article |
id | doaj-art-85ed49345fd94ff2854bdba14dc6383f |
institution | Kabale University |
issn | 1000-0801 |
language | zho |
publishDate | 2018-11-01 |
publisher | Beijing Xintong Media Co., Ltd |
record_format | Article |
series | Dianxin kexue |
spelling | doaj-art-85ed49345fd94ff2854bdba14dc6383f2025-01-15T03:03:51ZzhoBeijing Xintong Media Co., LtdDianxin kexue1000-08012018-11-013415616559593157Design and performance analysis of a SDN-based intelligent and collaborative Honeynet for mobile networks environmentLiyue CHENYangdan NIXiaoyun KONGSheng ZHOUHui HUANGXing ZHENGIn the mobile network environment,the mobile honeypot resources are limited and the attack injection means are flexible,so it is necessary to dynamically deploy the honeynet to collaboratively detect the attack behavior characteristics.However,existing honey nets are susceptible to feature recognition attacks,malicious traffic within the network,and can’t be migrated across honeypots.Based on software defined networking (SDN) technology,an intelligent collaborative honeynet system (ic-Honeynet) was designed.It consisted of a reverse connection proxy module and a honeynet controller.Finally,an ic-Honeynet experimental environment was built and the effectiveness of the system was verified.The experimental results show that the throughput of the system is nearly linear,up to 8.23 Gbit/s; the additional increase in response delay is small,only in the range of 0.5 to 1.2 ms; the connection processing capability is also very strong,up to 1 473 connections/s.http://www.telecomsci.com/zh/article/doi/10.11959/j.issn.1000-0801.2018278/HoneypotHoneynetmobile networksoftware defined networkingreverse connection proxy |
spellingShingle | Liyue CHEN Yangdan NI Xiaoyun KONG Sheng ZHOU Hui HUANG Xing ZHENG Design and performance analysis of a SDN-based intelligent and collaborative Honeynet for mobile networks environment Dianxin kexue Honeypot Honeynet mobile network software defined networking reverse connection proxy |
title | Design and performance analysis of a SDN-based intelligent and collaborative Honeynet for mobile networks environment |
title_full | Design and performance analysis of a SDN-based intelligent and collaborative Honeynet for mobile networks environment |
title_fullStr | Design and performance analysis of a SDN-based intelligent and collaborative Honeynet for mobile networks environment |
title_full_unstemmed | Design and performance analysis of a SDN-based intelligent and collaborative Honeynet for mobile networks environment |
title_short | Design and performance analysis of a SDN-based intelligent and collaborative Honeynet for mobile networks environment |
title_sort | design and performance analysis of a sdn based intelligent and collaborative honeynet for mobile networks environment |
topic | Honeypot Honeynet mobile network software defined networking reverse connection proxy |
url | http://www.telecomsci.com/zh/article/doi/10.11959/j.issn.1000-0801.2018278/ |
work_keys_str_mv | AT liyuechen designandperformanceanalysisofasdnbasedintelligentandcollaborativehoneynetformobilenetworksenvironment AT yangdanni designandperformanceanalysisofasdnbasedintelligentandcollaborativehoneynetformobilenetworksenvironment AT xiaoyunkong designandperformanceanalysisofasdnbasedintelligentandcollaborativehoneynetformobilenetworksenvironment AT shengzhou designandperformanceanalysisofasdnbasedintelligentandcollaborativehoneynetformobilenetworksenvironment AT huihuang designandperformanceanalysisofasdnbasedintelligentandcollaborativehoneynetformobilenetworksenvironment AT xingzheng designandperformanceanalysisofasdnbasedintelligentandcollaborativehoneynetformobilenetworksenvironment |