HONEYMAZE: A HYBRID INTRUSION DETECTION SYSTEM
Amit Chugh
Abstract
Amit Chugh
Abstract
In this paper we discussed, a hybrid intrusion detection system using honey pot. Hybrid honeypot is the combination of low and high interaction honeypots. It helps in detecting intrusion attacking on the system. For this, I have proposed the hybrid model of hybrid honeypot. Low interaction honeypot provide enough interaction to attackers to allow honeypot to detect interesting attacks. It also includes the concept of neural network in combination with anomaly detection technique. Attacks against the honeypot are caught, and any incurred state changes are discarded and the alarm is raised. The outcome of processing a request is used to filter future attack instances and could be used to update the anomaly detector and updated in the log table. By using hybrid architecture, we can reduce the cost of deploying honeypots.
A significance statement is not available in the OpenAlex record.
A contribution statement is not available in the OpenAlex record.
Method details are not available in the OpenAlex metadata.
Findings are not separately available in the OpenAlex metadata.
Limitations are not available in the OpenAlex metadata.
Application details are not available in the OpenAlex metadata.
In this paper we discussed, a hybrid intrusion detection system using honey pot. Hybrid honeypot is the combination of low and high interaction honeypots. It helps in detecting intrusion attacking on the system. For this, I have proposed the hybrid model of hybrid honeypot. Low interaction honeypot provide enough interaction to attackers to allow honeypot to detect interesting attacks. It also includes the concept of neural network in combination with anomaly detection technique. Attacks against the honeypot are caught, and any incurred state changes are discarded and the alarm is raised. The outcome of processing a request is used to filter future attack instances and could be used to update the anomaly detector and updated in the log table. By using hybrid architecture, we can reduce the cost of deploying honeypots.
Key concepts: Honeypot, Intrusion detection system, Computer science, Anomaly-based intrusion detection system, Anomaly detection, Intrusion, ALARM, Computer security