Creation of a High-Interaction Honeypot System based-on Docker containers
Jorge Buzzio-García
Abstract
This article proposes the creation of a high interaction honeypot based on Docker for the detection of attacks at both network-level and host-level. Open source tools have been used to make it scalable, dynamic and secure for its implementation. It has been tested in a real environment showing its effectiveness in capturing malicious data for subsequent analysis at network-level and host-level and using tools such as VirusTotal.
Topics & Concepts
HoneypotScalabilityComputer scienceHost (biology)Open sourceOperating systemComputer securityNetwork securityComputer networkSoftwareEcologyBiologyNetwork Security and Intrusion DetectionAdvanced Malware Detection TechniquesInternet Traffic Analysis and Secure E-voting