Identification of honeypot-systems on the basis of complex analysis of node performance indicators

Network and telecommunication security
Authors:
Ponomarev D. A. Ovasapyan T. D. Ivanov D. V.
Abstract:

The principles of construction and functioning of honeypot systems are investigated. The existing detection methods are analyzed, their advantages and disadvantages are highlighted. A detection method based on the analysis of command execution delays is proposed. A universal detection method based on combining the results of the methods is proposed. A software prototype of the detection system is developed and tested