Efficiency and security of docker based honeypot systems

Dubravko Sever, Tonimir Kišasondi · 2018

Honeypot is a computer, a group of computers, an application or just a single service with the main task of attracting malicious agents. It is actually bait, used to detect or mitigate attacks or simply to divert the attacker from the real services. The challenge in creating honeypots is how to create an agile and flexible Honeypot infrastructure. In this paper we assert that, as regards to efficiency, containers are more suitable for this kind of task compared to other technologies. However, we analyse the security of Honeypot implementations inside of containers based on Docker, which is the de facto standard for containers and a widely used implementation.

Read the paper · More papers on PaperTik