The Application of Data Mining in the Honeypot System

Abstract:

Honeypot is a new type of active defense security technologies. This paper attempts to use of data mining methods to be mining and analysis of information collected on the honeypot system. Build a Windows system based on virtual machine technology research honeynet. Data collection be standardized and sequential pattern mining. Finding out the correlation between different data records and frequent with time-based sequence of audit data, which found that,select the law of value of the attack.

• Periodical: Applied Mechanics and Materials (Volumes 519-520)
• Pages: 189-192
• DOI: https://doi.org/10.4028/www.scientific.net/AMM.519-520.189
• Online since: February 2014
• Authors: Zhuo Shi Li, Ran Shi Jiang*, Jian Li
• Keywords: Data Mining (DM), Honeynet, Honeypot, Intrusion Detection System

References

[1] The Honeynet Project. http: /www. honeynet. org, (2007).

[2] Honey Project. Know your enemy [EB/OL]. http: /www. honey. org/papers/honeynet/index. html.

[3] Changyan Peng, Chaojing Tang and Senqiang Zhang: Electronic Engineer. Vol. 30(2004), p.59. (In Chinese).

[4] Libo Ma, Haixin Duan and Xing Li: Journal of Dalian University of Technology. Vol. 45 Suppl . (2005), p.150 (In Chinese).

[5] Zhi Zhang, Yan Geng and Guanzhong Dai: Journal of Chinese Computer Systems. Vol. 26(2005), p.920. (In Chinese).