Loading [a11y]/accessibility-menu.js
Data analyzer based on data mining for Honeypot Router | IEEE Conference Publication | IEEE Xplore

Data analyzer based on data mining for Honeypot Router


Abstract:

Honeypot is an effective security tool, which is intended to be attacked and compromised to gain more information about the attacker and his attack techniques. To study t...Show More

Abstract:

Honeypot is an effective security tool, which is intended to be attacked and compromised to gain more information about the attacker and his attack techniques. To study these attacks, the honeypot must capture and log large amounts of data which are very difficult to process manually. So, the analysis of these logs has become a very difficult and time consuming task. To resolve this problem, several researchers have proposed the use of data mining techniques in order to classify logged traffic and extract useful information. In this paper, we present a data analysis tool for our Honeypot Router. This tool is based on data mining clustering. The main idea is to extract useful features from data captured by the Honeypot Router. These data will be then clustered by using the DBSCAN clustering algorithm in order to classify the captured packets and extract those that are suspicious. Suspicious packets will be then verified by a human expert. This solution is very useful to detect novel routing attacks.
Date of Conference: 16-19 May 2010
Date Added to IEEE Xplore: 27 September 2010
ISBN Information:

ISSN Information:

Conference Location: Hammamet, Tunisia

Contact IEEE to Subscribe

References

References is not available for this document.