HoneyDOC: An Efficient Honeypot Architecture Enabling All-Round Design
<|reference_start|>HoneyDOC: An Efficient Honeypot Architecture Enabling All-Round Design: Honeypots are designed to trap the attacker with the purpose of investigating its malicious behavior. Owing to the increasing variety and sophistication of cyber attacks, how to capture high-quality attack data has become a challenge in the context of honeypot area. All-round honeypots, which mean significant improvement in sensibility, countermeasure and stealth, are necessary to tackle the problem. In this paper, we propose a novel honeypot architecture termed HoneyDOC to support all-round honeypot design and implementation. Our HoneyDOC architecture clearly identifies three essential independent and collaborative modules, Decoy, Captor and Orchestrator. Based on the efficient architecture, a Software-Defined Networking (SDN) enabled honeypot system is designed, which supplies high programmability for technically sustaining the features for capturing high-quality data. A proof-of-concept system is implemented to validate its feasibility and effectiveness. The experimental results show the benefits by using the proposed architecture comparing to the previous honeypot solutions.<|reference_end|>
@article{fan2024honeydoc:,
    title={HoneyDOC: An Efficient Honeypot Architecture Enabling All-Round Design},
    author={Wenjun Fan, Zhihui Du, Max Smith-Creasey, David Fern'andez},
    journal={W. Fan, Z. Du, M. Smith-Creasey, D. Fern\'andez, "HoneyDOC: An
  Efficient Honeypot Architecture Enabling All-Round Design", IEEE Journal on
  Selected Areas in Communications, vol. 37, issue 3, March 2019},
    year={2024},
    doi={10.1109/JSAC.2019.2894307},
    archivePrefix={arXiv},
    eprint={2402.06516},
    primaryClass={cs.CR cs.NI}
}