A Survey on Dynamic Honeypots
Hamid Mohammadzadeh · International Journal of Information and Electronics Engineering · 2012
Today’s it is obvious that the number of vulnerable threat of network assets increase significantly. The major examples of such threats are worms which can be found in the Internet. In spite of decades of research and experience, still incapable to make secure computer systems and also they immobilized manufacture ways to measure a computer systems and networks level of security. This is certainly true that intrusion to a network or system can never be eliminated but security helps reduce risk to an organization and its information-related resources. However, three particular concepts surrounded the IT security includes Detection, Prevention and Reaction. In one hand, you can’t find end-to-end equipments solution to cover all or even two of concepts. In the other hand, secure digital resources in an organization by ruling detect and prevent vulnerabilities before exploited. Looking at network intrusion detection systems (NIDS) before starting with honeypots, could be useful to motivate the use of honeypots. NIDS by providing the amount of functional information causes an increasing number of protocols that employ encryption to protect network traffic from eavesdroppers and decreasing in the face of ever more complicated evasion techniques. Effectiveness of NIDSs is weak because of high false positive rates. Using honeypots assists to decrease the number of the false positives. In network security an Intrusion Prevention System (IPS) is the method of that monitors network and/or system activities for malicious or unwilling behavior. Moreover, IPS is accountable attempting to stop discovered possible occurrences in realtime. In the other hand intrusion prevention systems are the