International Conference on Information Technology: Coding and Computing (ITCC'04) Volume 1
J-Honeypot: A Java-Based Network Deception Tool with Monitoring and Intrusion Detection
Las Vegas, Nevada
April 05-April 07
ISBN: 0-7695-2108-8
In this paper, we describe the development of J-Honeypot, a Java-based network deception tool with a web-based monitoring interface and a rule-based intrusion detection engine. Our J-Honeypot is based on the Honeyd program by Niels Provos, but features important enhancements. First, since J-Honeypot is written in Java, it can potentially run on various platforms, windows or UNIX, workstations or handheld devices. Second, J-Honeypot has a rule-based intrusion detection engine, whose design is guided by the analysis of real world attack data. The attack data was collected by opening up our J-Honeypot to solicit possible attacks. Third, J-Honeypot includes a web-based monitoring tool that is easily accessible and can help network administrators better understand network traffic and possible attacks.
Citation:
Yuqing Mai, Radhika Upadrashta, Xiao Su, "J-Honeypot: A Java-Based Network Deception Tool with Monitoring and Intrusion Detection," itcc, vol. 1, pp.804, International Conference on Information Technology: Coding and Computing (ITCC'04) Volume 1, 2004