AN EXPERIMENT IN SOFTWARE DECOY DESIGN Intrusion Detection and Countermeasures via System Call Instrumentation
J. Bret Michael, Georgios Fragkos, Mikhail Auguston · 2003
Abstract: This paper presents an implementation of integrated intrusion detection and system response based on system call instrumentation. We introduce the notion of an intelligent software decoy as a means for detection and response to patterns of suspicious behavior. A prototype of such a system has been developed using NAI Labs ’ Generic Software Wrapper Toolkit. We present a case study of an ftp-based intrusion.