HoneyBow: an automated malware collection tool based on the high-interaction honeypot principle
Jianwei Zhuge, Xinhui Han, Zhou Yonglin, Chengyu Song, Guo Jin-peng, Zou Wei · DOAJ (DOAJ: Directory of Open Access Journals) · 2007
Malware has become one of the severest threats to the public Internet.To deal with the malware breakout ef-fectively as early as possible,an automated malware collection solution must be implemented as a precondition.An automated malware collection tool was presented based on the high-interaction honeypot principle called HoneyBow.Comparing with the Nepenthes platform based on the low-interaction honeypot principle,HoneyBow has its advantages on wilder range of captured malware samples and the capability of collecting unknown malware samples,which are vali-dated by the experiment results from wild malware collection and the case of Mocbot dealment.