Πλοήγηση ανά Επιβλέπων "Douskas, Theodoros"

A B C D E F G H I J K L M N O P Q R S T U V W X Y Z

Α Β Γ Δ Ε Ζ Η Θ Ι Κ Λ Μ Ν Ξ Ο Π Ρ Σ Τ Υ Φ Χ Ψ Ω

Τώρα δείχνει 1 - 1 από 1

Honeypot installation and utilization on detecting attack patterns and threat intelligence
(2018) Konstantzos, Achilleas; Athens University of Economics and Business, Department of Informatics; Stergiopoulos, George; Douskas, Theodoros
This diploma thesis aims at studying and demonstrating the role of honeypots as a means of adopting active defense practices in cyber security. Its purpose is to describe several possible implementations of the honeypot concept in both perimeter security and research, analyze different deployment strategies and deception techniques, and present their contribution to security as well as the problems that may arise from their use. The thesis covers honeypots as described in international literature followed by a custom deployment of a honeynet lab which was hosted in the premises of a Greek cyber security services company. The lab includes three honeypot virtual machines, simulating five high-vulnerability digital services: SSH and telnet remote access, SIP/PJSIP VoIP telephony protocols, and a Wordpress-based web page. These honeypots forward logs to a virtual machine hosting a SIEM (Security Information and Event Management) system, parsing them and collecting threat intelligence. The process of configuring the honeypot network as well as security hardening and isolation is also presented. Findings extracted during the operation of the honeynet lab include the detection of tens of thousands of attacks while recording their attack patterns. Attack types of dominant frequency were selected to be analyzed in terms of their techniques and motives. Finally, the value of honeypots in local security hardening and threat intelligence research is estimated, in correlation with lessons learnt from this specific lab. Future development of the lab is also outlined.