A Development of Novel Attack Detection Methods using Virtual Honeynet
Dae-Kwon Kang, Ieck-Chae Euom, Chun-Suk Kim · The Journal of the Korea institute of electronic communication sciences · 2010
A honeynet is a closely monitored computing resource that we want to be probed, attacked or compromised. More precisely, a honeypot is an information system resource whose value lies in unauthorized or illicit use of that resource The value of honeynet is weighed by the information that can be obtained from it. but It's very difficult to deploy Honeynet in Real World, So I focused on Virtual Honeynet. The strength of virtual honeynet is scalability and ease of maintenance. It is inexpensive to deploy and accessible to almost everyone. Compared with physical honeypots, this approach is more lightweight. Instead of deploying a physical computer system that acts as a honeypot, we can also deploy one physical computer that hosts several virtual machines that act as honeypots.