Honeypot Testbed for Network Defence Strategy Evaluation

Result code in IS VaVaI

<a href="https://www.isvavai.cz/riv?ss=detail&h=RIV%2F00216224%3A14610%2F17%3A00094470" target="_blank" >RIV/00216224:14610/17:00094470 - isvavai.cz</a>

Result on the web

<a href="http://ieeexplore.ieee.org/document/7987397/" target="_blank" >http://ieeexplore.ieee.org/document/7987397/</a>

DOI - Digital Object Identifier

<a href="http://dx.doi.org/10.23919/INM.2017.7987397" target="_blank" >10.23919/INM.2017.7987397</a>

Result language

angličtina

Original language name

Honeypot Testbed for Network Defence Strategy Evaluation

Original language description

In this paper, we describe a network defence strategy testbed, which could be utilized for testing the strategy decision logic against simulated attacks or real attackers. The testbed relies on a network of honeypots and the high level of logging and monitoring the honeypots provide. Its main advantage is that only the decision logic implementation is needed in order to test the strategy. The testbed also evaluates the tested network defence strategy. We demonstrate an example of network defence strategy implementation, the test setup, progress, and results. The source code of the testbed is available on GitHub.

Czech name

—

Czech description

—

Type

D - Article in proceedings

CEP classification

—

OECD FORD branch

10201 - Computer sciences, information science, bioinformathics (hardware development to be 2.2, social aspect to be 5.8)

Project

<a href="/en/project/VI20162019014" target="_blank" >VI20162019014: Simulation, detection, and mitigation of cyber threats endangering critical infrastructure</a><br>

Continuities

P - Projekt vyzkumu a vyvoje financovany z verejnych zdroju (s odkazem do CEP)

Publication year

2017

Confidentiality

S - Úplné a pravdivé údaje o projektu nepodléhají ochraně podle zvláštních právních předpisů

Article name in the collection

2017 IFIP/IEEE Symposium on Integrated Network and Service Management (IM)

ISBN

9783901882890

ISSN

—

e-ISSN

—

Number of pages

2

Pages from-to

887-888

Publisher name

IEEE

Place of publication

Lisbon

Event location

Lisbon

Event date

May 8, 2017

Type of event by nationality

WRD - Celosvětová akce

UT code for WoS article

—