Investigation of modern attacks using proxy honeypot
Ruslan E. Mushtakov, Dmitry Sergeevich Silnov, Oleg V. Tarakanov, Vladislav A. Bukharov · 2018
Open proxy server is the service in computer networks which allows any user on the Internet to execute indirect requests to other network services. This technology can be used for different purposes, in particular for performing malicious attacks. Honeypot technology is a resource which represents a lure for an attacker. This article discusses implementation of the honeypot based on the open proxy server. This solution allows to log all activity on the investigated proxy. The focus of the work is devoted to the analysis of log data and identification of patterns of violator's behavior. As a result, the classification of malicious users and the statistics of the attacks' sources are provided.