title: ÐÑÐ¿Ð¾Ð»ÑÐ·Ð¾Ð²Ð°Ð½Ð¸Ðµ ÑÐ·Ð»Ð¾Ð²-Ð¿ÑÐ¸Ð¼Ð°Ð½Ð¾Ðº Ð´Ð»Ñ Ð¾Ð±Ð½Ð°ÑÑÐ¶ÐµÐ½Ð¸Ñ Ð°ÑÐ°Ðº Ð½Ð° ÐºÐ¾ÑÐ¿Ð¾ÑÐ°ÑÐ¸Ð²Ð½ÑÐµ Ð²ÐµÐ±-ÑÐµÑÑÑÑÑ
title: Ð²ÑÐ¿ÑÑÐºÐ½Ð°Ñ ÐºÐ²Ð°Ð»Ð¸ÑÐ¸ÐºÐ°ÑÐ¸Ð¾Ð½Ð½Ð°Ñ ÑÐ°Ð±Ð¾ÑÐ° ÑÐ¿ÐµÑÐ¸Ð°Ð»Ð¸ÑÑÐ°
titleType: Subtitle
title: Using honeypots to detect attacks on corporate web-resources
Creators: name: ÐÐ¸ÑÐºÐ¾Ð², ÐÐ»ÐµÐºÑÐ°Ð½Ð´Ñ
Publisher: name: Ð¡Ð°Ð½ÐºÑ-ÐÐµÑÐµÑÐ±ÑÑÐ³ÑÐºÐ¸Ð¹ Ð¿Ð¾Ð»Ð¸ÑÐµÑÐ½Ð¸ÑÐµÑÐºÐ¸Ð¹ ÑÐ½Ð¸Ð²ÐµÑÑÐ¸ÑÐµÑ ÐÐµÑÑÐ° ÐÐµÐ»Ð¸ÐºÐ¾Ð³Ð¾
Year: 2022
Subjects: honeypot-ÑÐ¸ÑÑÐµÐ¼Ð°
Ð°ÑÐ°ÐºÐ¸ Ð½Ð° Ð²ÐµÐ±-Ð¿ÑÐ¸Ð»Ð¾Ð¶ÐµÐ½Ð¸Ñ
ÐºÐ¾ÑÐ¿Ð¾ÑÐ°ÑÐ¸Ð²Ð½ÑÐµ Ð²ÐµÐ±-ÑÐµÑÑÑÑÑ
ÑÑÐµÐ´ÑÑÐ²Ð° Ð²ÑÑÐ²Ð»ÐµÐ½Ð¸Ñ Ð°ÑÐ°Ðº
honeypot system
attacks on web-applications
corporate web-resources
attack detection tools

description: Ð¢ÐµÐ¼Ð° Ð²ÑÐ¿ÑÑÐºÐ½Ð¾Ð¹ ÐºÐ²Ð°Ð»Ð¸ÑÐ¸ÐºÐ°ÑÐ¸Ð¾Ð½Ð½Ð¾Ð¹ ÑÐ°Ð±Ð¾ÑÑ: Â«ÐÑÐ¿Ð¾Ð»ÑÐ·Ð¾Ð²Ð°Ð½Ð¸Ðµ ÑÐ·Ð»Ð¾Ð²-Ð¿ÑÐ¸Ð¼Ð°Ð½Ð¾Ðº Ð´Ð»Ñ Ð¾Ð±Ð½Ð°ÑÑÐ¶ÐµÐ½Ð¸Ñ Ð°ÑÐ°Ðº Ð½Ð° ÐºÐ¾ÑÐ¿Ð¾ÑÐ°ÑÐ¸Ð²Ð½ÑÐµ Ð²ÐµÐ±-ÑÐµÑÑÑÑÑÂ».Ð¦ÐµÐ»ÑÑ ÑÐ°Ð±Ð¾ÑÑ ÑÐ²Ð»ÑÐµÑÑÑ ÑÐ¾Ð·Ð´Ð°Ð½Ð¸Ðµ Ð¿Ð¾Ð´ÑÐ¾Ð´Ð° Ðº Ð¿Ð¾ÑÑÑÐ¾ÐµÐ½Ð¸Ñ ÑÐ¸ÑÑÐµÐ¼ ÑÐ·Ð»Ð¾Ð²-Ð¿ÑÐ¸Ð¼Ð°Ð½Ð¾Ðº, ÑÐ¼ÑÐ»Ð¸ÑÑÑÑÐ¸Ñ ÑÑÐ·Ð²Ð¸Ð¼ÑÐµ Ð²ÐµÐ±-ÑÐµÑÑÑÑÑ Ð¸ Ð¸Ð¼ÐµÑÑÐ¸Ñ Ð¼Ð°ÐºÑÐ¸Ð¼Ð°Ð»ÑÐ½Ð¾Ðµ ÑÑÐ¾Ð´ÑÑÐ²Ð¾ Ñ Ð¸Ð½ÑÐµÑÑÐµÐ¹ÑÐ¾Ð¼ ÑÐµÐ»ÐµÐ²Ð¾Ð³Ð¾ Ð¿ÑÐ¸Ð»Ð¾Ð¶ÐµÐ½Ð¸Ñ. ÐÑÐµÐ´Ð¼ÐµÑÐ¾Ð¼ Ð¸ÑÑÐ»ÐµÐ´Ð¾Ð²Ð°Ð½Ð¸Ñ ÑÐ²Ð»ÑÑÑÑÑ Ð¼ÐµÑÐ¾Ð´Ñ Ð¸ Ð°Ð»Ð³Ð¾ÑÐ¸ÑÐ¼Ñ, Ð¸ÑÐ¿Ð¾Ð»ÑÐ·ÑÐµÐ¼ÑÐµ Ð´Ð»Ñ Ð¿Ð¾ÑÑÑÐ¾ÐµÐ½Ð¸Ñ ÑÐ¸ÑÑÐµÐ¼ ÑÐ·Ð»Ð¾Ð²-Ð¿ÑÐ¸Ð¼Ð°Ð½Ð¾Ðº, ÑÐ¼ÑÐ»Ð¸ÑÑÑÑÐ¸Ñ ÑÑÐ·Ð²Ð¸Ð¼ÑÐµ Ð²ÐµÐ±-ÑÐµÑÑÑÑÑ. ÐÐ°Ð´Ð°ÑÐ¸, ÑÐµÑÐ°ÐµÐ¼ÑÐµ Ð² ÑÐ¾Ð´Ðµ Ð¸ÑÑÐ»ÐµÐ´Ð¾Ð²Ð°Ð½Ð¸Ñ:ÐÑÑÐ»ÐµÐ´Ð¾Ð²Ð°Ð½Ð¸Ðµ Ð¸ ÑÑÐ°Ð²Ð½Ð¸ÑÐµÐ»ÑÐ½ÑÐ¹ Ð°Ð½Ð°Ð»Ð¸Ð· ÑÑÑÐµÑÑÐ²ÑÑÑÐ¸Ñ ÑÑÐµÐ´ÑÑÐ² Ð´Ð»Ñ Ð²ÑÑÐ²Ð»ÐµÐ½Ð¸Ñ Ð°ÑÐ°Ðº Ð½Ð° Ð²ÐµÐ±-Ð¿ÑÐ¸Ð»Ð¾Ð¶ÐµÐ½Ð¸Ñ.ÐÐ½Ð°Ð»Ð¸Ð· ÑÑÑÐµÑÑÐ²ÑÑÑÐ¸Ñ ÑÐ¸Ð¿Ð¾Ð² honeypot-ÑÐ¸ÑÑÐµÐ¼.Ð¡ÑÐ°Ð²Ð½ÐµÐ½Ð¸Ðµ Ð¿ÑÐ¾Ð³ÑÐ°Ð¼Ð¼Ð½ÑÑ ÑÐµÑÐµÐ½Ð¸Ð¹, Ð¸ÑÐ¿Ð¾Ð»ÑÐ·ÑÑÑÐ¸Ñ Ð¼ÐµÑÐ¾Ð´ Ð²ÑÑÐ²Ð»ÐµÐ½Ð¸Ñ Ð°ÑÐ°Ðº Ð½Ð° Ð²ÐµÐ±-ÑÐµÑÑÑÑÑ Ñ Ð¸ÑÐ¿Ð¾Ð»ÑÐ·Ð¾Ð²Ð°Ð½Ð¸ÐµÐ¼ ÑÐ·Ð»Ð¾Ð²-Ð¿ÑÐ¸Ð¼Ð°Ð½Ð¾Ðº.Ð Ð°Ð·ÑÐ°Ð±Ð¾ÑÐºÐ° Ð¼ÐµÑÐ¾Ð´Ð° Ð¿Ð¾ÑÑÑÐ¾ÐµÐ½Ð¸Ñ honeypot-ÑÐ¸ÑÑÐµÐ¼Ñ Ð´Ð»Ñ Ð²ÑÑÐ²Ð»ÐµÐ½Ð¸Ñ Ð°ÑÐ°Ðº Ð½Ð° Ð²ÐµÐ±-Ð¿ÑÐ¸Ð»Ð¾Ð¶ÐµÐ½Ð¸Ñ.Ð ÐµÐ°Ð»Ð¸Ð·Ð°ÑÐ¸Ñ Ð¿ÑÐ¾ÑÐ¾ÑÐ¸Ð¿Ð° honeypot-ÑÐ¸ÑÑÐµÐ¼Ñ, ÐºÐ¾ÑÐ¾ÑÐ°Ñ Ð¸ÑÐ¿Ð¾Ð»ÑÐ·ÑÐµÑ ÑÐ°Ð·ÑÐ°Ð±Ð¾ÑÐ°Ð½Ð½ÑÐ¹ Ð¿Ð¾Ð´ÑÐ¾Ð´ Ðº ÐµÐµ Ð¿Ð¾ÑÑÑÐ¾ÐµÐ½Ð¸Ñ.Ð ÑÐ°Ð±Ð¾ÑÐµ Ð±ÑÐ»Ð¸ Ð¿ÑÐ¾Ð°Ð½Ð°Ð»Ð¸Ð·Ð¸ÑÐ¾Ð²Ð°Ð½Ñ Ð¿ÑÐ¾Ð³ÑÐ°Ð¼Ð¼Ð½ÑÐµ ÑÑÐµÐ´ÑÑÐ²Ð°, Ð¸ÑÐ¿Ð¾Ð»ÑÐ·ÑÑÑÐ¸Ðµ ÑÐ·Ð»Ñ-Ð¿ÑÐ¸Ð¼Ð°Ð½ÐºÐ¸ Ð´Ð»Ñ Ð²ÑÑÐ²Ð»ÐµÐ½Ð¸Ñ Ð°ÑÐ°Ðº Ð½Ð° Ð²ÐµÐ±-ÑÐµÑÑÑÑÑ. ÐÐ»Ñ ÑÐ°ÑÑÐ¼Ð¾ÑÑÐµÐ½Ð½ÑÑ ÑÑÐµÐ´ÑÑÐ² Ð²ÑÐ´ÐµÐ»ÐµÐ½Ñ Ð¿ÑÐµÐ¸Ð¼ÑÑÐµÑÑÐ²Ð° Ð¸ Ð½ÐµÐ´Ð¾ÑÑÐ°ÑÐºÐ¸ ÑÐµÐ°Ð»Ð¸Ð·Ð°ÑÐ¸Ð¸. ÐÑÐ»Ð¸ Ð²ÑÐ´Ð²Ð¸Ð½ÑÑÑ ÑÑÐµÐ±Ð¾Ð²Ð°Ð½Ð¸Ñ Ðº Ð¿Ð¾Ð´ÑÐ¾Ð´Ñ Ðº ÑÐ¼ÑÐ»ÑÑÐ¸Ð¸ ÑÑÐ·Ð²Ð¸Ð¼Ð¾Ð³Ð¾ Ð¿Ð¾Ð²ÐµÐ´ÐµÐ½Ð¸Ñ ÐºÐ¾ÑÐ¿Ð¾ÑÐ°ÑÐ¸Ð²Ð½ÑÑ Ð²ÐµÐ±-ÑÐµÑÑÑÑÐ¾Ð². ÐÐ»Ñ ÐºÐ°Ð¶Ð´Ð¾Ð³Ð¾ Ð¸Ð· ÑÑÐµÐ±Ð¾Ð²Ð°Ð½Ð¸Ð¹ Ð±ÑÐ»Ð¸ ÑÐ°Ð·ÑÐ°Ð±Ð¾ÑÐ°Ð½Ñ Ð¼ÐµÑÐ¾Ð´Ñ, ÐºÐ¾ÑÐ¾ÑÑÐµ Ð½Ð°Ð¿ÑÐ°Ð²Ð»ÐµÐ½Ñ Ð½Ð° ÑÐµÑÐµÐ½Ð¸Ðµ Ð¾Ð¿ÑÐµÐ´ÐµÐ»ÐµÐ½Ð½Ð¾Ð¹ Ð·Ð°Ð´Ð°ÑÐ¸. Ð ÑÐµÐ·ÑÐ»ÑÑÐ°ÑÐµ Ð±ÑÐ» ÑÐ°Ð·ÑÐ°Ð±Ð¾ÑÐ°Ð½ Ð¼Ð°ÐºÐµÑ ÑÐ¸ÑÑÐµÐ¼Ñ Ð´Ð»Ñ ÑÐ°Ð·Ð²Ð¾ÑÐ°ÑÐ¸Ð²Ð°Ð½Ð¸Ñ ÑÐ·Ð»Ð°-Ð¿ÑÐ¸Ð¼Ð°Ð½ÐºÐ¸, ÐºÐ¾ÑÐ¾ÑÑÐ¹ Ð¸ÑÐ¿Ð¾Ð»ÑÐ·ÑÐµÑ ÐºÐ¾ÑÐ¿Ð¾ÑÐ°ÑÐ¸Ð²Ð½ÑÑ ÑÐ¿ÐµÑÐ¸ÑÐ¸ÐºÑ Ð¸ ÑÐ¼ÑÐ»Ð¸ÑÑÐµÑ ÑÑÐ·Ð²Ð¸Ð¼Ð¾Ðµ Ð¿Ð¾Ð²ÐµÐ´ÐµÐ½Ð¸Ðµ Ð²ÐµÐ±-ÑÐµÑÑÑÑÐ°.Â 
description: The topic of the graduate qualification work is Â«Using honeypots to detect attacks on corporate web-resourcesÂ».The purpose of the study is to create an approach to building systems of decoy nodes that emulate vulnerable web resources and have the maximum similarity with the interface of the target application. The subject of the study is the methods and algorithms used to build honeypot systems that emulate vulnerable web resources. Tasks to be solved in the course of the study:Research and comparative analysis of existing tools for detecting attacks on web applications.Analysis of existing types of honeypot systems.Comparison of software solutions using the method of detecting attacks on web resources using honeypot nodes.Development of a method for building a honeypot system to detect attacks on web applications.Implementation of a prototype honeypot system that uses the developed approach to its construction.The work analyzed software tools that use honeypot nodes to detect attacks on web resources. For the considered means, the advantages and disadvantages of implementation are highlighted. Requirements were put forward for an approach to emulating the vulnerable behavior of corporate web resources. For each of the requirements, methods have been developed that are aimed at solving a specific problem. As a result, a system layout was developed for deploying a decoy node, which uses corporate specifics and emulates the vulnerable behavior of a web resource.