A Proposal for a New Way of Classifying Network Security Metrics: Study of the Information Collected through a Honeypot
| Title | A Proposal for a New Way of Classifying Network Security Metrics: Study of the Information Collected through a Honeypot |
| Publication Type | Conference Paper |
| Year of Publication | 2018 |
| Authors | Carrasco, A., Ropero, J., Clavijo, P. Ruiz de, Benjumea, J., Luque, A. |
| Conference Name | 2018 IEEE International Conference on Software Quality, Reliability and Security Companion (QRS-C) |
| ISBN Number | 978-1-5386-7839-8 |
| Keywords | attacker behaviour evaluation, computer network security, Conferences, Data collection, file servers, honeypot, IDS, information collection, Kippo, metric, Metrics, Network security, network security metric classification, pubcrawl, security, security metrics, software quality, software reliability, SSH honeypot-based system, statistical analysis, time 19.0 month, vulnerable server |
| Abstract | Nowadays, honeypots are a key tool to attract attackers and study their activity. They help us in the tasks of evaluating attacker's behaviour, discovering new types of attacks, and collecting information and statistics associated with them. However, the gathered data cannot be directly interpreted, but must be analyzed to obtain useful information. In this paper, we present a SSH honeypot-based system designed to simulate a vulnerable server. Thus, we propose an approach for the classification of metrics from the data collected by the honeypot along 19 months. |
| URL | https://ieeexplore.ieee.org/document/8432038 |
| DOI | 10.1109/QRS-C.2018.00110 |
| Citation Key | carrasco_proposal_2018 |
- network security
- vulnerable server
- time 19.0 month
- statistical analysis
- SSH honeypot-based system
- software reliability
- software quality
- Security Metrics
- security
- pubcrawl
- network security metric classification
- attacker behaviour evaluation
- Metrics
- metric
- Kippo
- information collection
- IDS
- honeypot
- file servers
- Data collection
- Conferences
- computer network security