Towards a Collaborative Architecture of Honeypots
Abdeljalil Agnaou, AnasAbou El Kalam, Abdellah Ait Ouahman · 2017
with the considerable growing of the information Systems, the number of attacks is increasing; these attacks have as targeted networks and systems of individuals, enterprises, organizations or administrations. This paper is about making Distributed Honeypot-Based architecture within the DMZ of many institutions in Morocco, to evaluate and analyse malicious traffic, study attacker's behaviours and their intentions, etc. First of all, we introduce the project and its objectives; then, we propose an explanation of concepts of honeypots, honeynets, and some honeypot management frameworks. In the third part, we give details of our architecture for the Moroccan Honeypot Project with some results from the implementation of a sensor within ENSA of Marrakech DMZ network; and finally, present our prospects for the project.