Building a Cognizant Honeypot for Detecting Active Fingerprinting Attacks Using Dynamic Fuzzy Rule Interpolation

Nitin Naik, Changjing Shang, Paul Jenkins, Qiang Shen

Allbwn ymchwil: Cyfraniad at gyfnodolynErthygladolygiad gan gymheiriaid

3 Dyfyniadau (Scopus)
147 Wedi eu Llwytho i Lawr (Pure)

Crynodeb

Dynamic fuzzy rule interpolation (D-FRI) technique delivers a dynamic rule base through the utilisation of fuzzy rule interpolation to infer more accurate results for a given application problem. D-FRI offered dynamic rule base is very useful in security areas where network conditions are always volatile and require the most updated rule base. A honeypot is a vital part of any security infrastructure for directly investigating attacks and attackers in real-time to strengthen the overall security of the network. However, a honeypot as a concealed system can only function successfully while its identity is not revealed to any attackers. Attackers always attempt to uncover such honeypots for avoiding any trap and strengthening their attacks. Active fingerprinting attack is used to detect these honeypots by injecting purposefully designed traffic to a network. Such an attack can be prevented by controlling the traffic but this will make honeypot unusable system if its interaction with the outside world is limited. Alternatively, it is practically more useful if this fingerprinting attack is detected in real-time to manage its immediate consequences and preventing the honeypot. This article offers an approach to building a cognizant honeypot for detecting active fingerprinting attacks through the utilisation of the established D-FRI technique. It is based on the use of just a sparse rule base while remaining capable of detecting active fingerprinting attacks when the system does not find any matching rules. Also, it learns from current network conditions and offers a dynamic rule base to facilitate more accurate and efficient detection.

Iaith wreiddiolSaesneg
Rhif yr erthygle12557
CyfnodolynExpert Systems
Cyfrol38
Rhif cyhoeddi5
Dyddiad ar-lein cynnar16 Ebr 2020
Dynodwyr Gwrthrych Digidol (DOIs)
StatwsCyhoeddwyd - 16 Gorff 2021

Ôl bys

Gweld gwybodaeth am bynciau ymchwil 'Building a Cognizant Honeypot for Detecting Active Fingerprinting Attacks Using Dynamic Fuzzy Rule Interpolation'. Gyda’i gilydd, maen nhw’n ffurfio ôl bys unigryw.

Dyfynnu hyn