title: ÐÐ½ÑÐµÑÐ°ÐºÑÐ¸Ð²Ð½Ð¾Ðµ Ð¿Ð¾ÑÑÑÐ¾ÐµÐ½Ð¸Ðµ ÑÐµÑÐ¸ honeypot Ð½Ð° Ð¾ÑÐ½Ð¾Ð²Ðµ Ð°Ð½Ð°Ð»Ð¸Ð·Ð° Ð°ÐºÑÐ¸Ð²Ð½Ð¾ÑÑÐ¸ Ð½Ð°ÑÑÑÐ¸ÑÐµÐ»Ñ
title: Ð²ÑÐ¿ÑÑÐºÐ½Ð°Ñ ÐºÐ²Ð°Ð»Ð¸ÑÐ¸ÐºÐ°ÑÐ¸Ð¾Ð½Ð½Ð°Ñ ÑÐ°Ð±Ð¾ÑÐ° ÑÐ¿ÐµÑÐ¸Ð°Ð»Ð¸ÑÑÐ°
titleType: Subtitle
title: Interactive construction of honeypot network based on the analysis of intruder activity
Creators: name: ÐÐµÑÐµÐ»Ð¾Ð², ÐÐ¾ÑÐ¸Ñ
Publisher: name: Ð¡Ð°Ð½ÐºÑ-ÐÐµÑÐµÑÐ±ÑÑÐ³ÑÐºÐ¸Ð¹ Ð¿Ð¾Ð»Ð¸ÑÐµÑÐ½Ð¸ÑÐµÑÐºÐ¸Ð¹ ÑÐ½Ð¸Ð²ÐµÑÑÐ¸ÑÐµÑ ÐÐµÑÑÐ° ÐÐµÐ»Ð¸ÐºÐ¾Ð³Ð¾
Year: 2024
Subjects: Ð´Ð¸Ð½Ð°Ð¼Ð¸ÑÐµÑÐºÐ¸Ð¹ honeypot
Ð²ÑÑÐ¸ÑÐ»Ð¸ÑÐµÐ»ÑÐ½ÑÐµ ÑÐµÑÑÑÑÑ
Ð¿Ð°Ð¼ÑÑÑ
Ð¿ÑÐ¾ÑÐµÑÑÐ¾ÑÐ½Ð¾Ðµ Ð²ÑÐµÐ¼Ñ
Ð°ÐºÑÐ¸Ð²Ð½Ð¾ÑÑÑ Ð½Ð°ÑÑÑÐ¸ÑÐµÐ»Ñ
dynamic honeypot
computing resources
memory
CPU time
intruder activity

description: Ð¦ÐµÐ»ÑÑ ÑÐ°Ð±Ð¾ÑÑ ÑÐ²Ð»ÑÐµÑÑÑ ÑÐ¼ÐµÐ½ÑÑÐµÐ½Ð¸Ðµ Ð¾Ð±ÑÐµÐ¼Ð° Ð¿Ð°Ð¼ÑÑÐ¸ Ð¸ Ð¿ÑÐ¾ÑÐµÑÑÐ¾ÑÐ½Ð¾Ð³Ð¾ Ð²ÑÐµÐ¼ÐµÐ½Ð¸, Ð¿Ð¾ÑÑÐµÐ±Ð»ÑÐµÐ¼Ð¾Ð³Ð¾ ÑÐ¸ÑÑÐµÐ¼Ð°Ð¼Ð¸ honeypot. ÐÑÐµÐ´Ð¼ÐµÑÐ¾Ð¼ Ð¸ÑÑÐ»ÐµÐ´Ð¾Ð²Ð°Ð½Ð¸Ñ ÑÐ²Ð»ÑÑÑÑÑ Ð¸ÑÐ¿Ð¾Ð»ÑÐ·ÑÐµÐ¼ÑÐµ ÑÐ¸ÑÑÐµÐ¼Ð¾Ð¹ honeypot Ð²ÑÑÐ¸ÑÐ»Ð¸ÑÐµÐ»ÑÐ½ÑÐµ ÑÐµÑÑÑÑÑ Ð¸ Ð½Ð°Ð±Ð¾Ñ ÑÐµÑÐ²Ð¸ÑÐ¾Ð², ÑÐ°Ð±Ð¾ÑÐ°ÑÑÐ¸Ñ Ð² honeypot. ÐÐ°Ð´Ð°ÑÐ¸, ÑÐµÑÐ°ÐµÐ¼ÑÐµ Ð² ÑÐ¾Ð´Ðµ Ð¸ÑÑÐ»ÐµÐ´Ð¾Ð²Ð°Ð½Ð¸Ñ: 1. ÐÐ½Ð°Ð»Ð¸Ð· ÑÑÑÐµÑÑÐ²ÑÑÑÐ¸Ñ Ð¼ÐµÑÐ¾Ð´Ð¾Ð² Ð¸ ÑÑÐµÐ´ÑÑÐ² Ð¿Ð¾ÑÑÑÐ¾ÐµÐ½Ð¸Ñ Ð´Ð¸Ð½Ð°Ð¼Ð¸ÑÐµÑÐºÐ¸Ñ ÑÐ¸ÑÑÐµÐ¼ honeypot. 2. Ð Ð°Ð·ÑÐ°Ð±Ð¾ÑÐºÐ° Ð°ÑÑÐ¸ÑÐµÐºÑÑÑÑ Ð´Ð¸Ð½Ð°Ð¼Ð¸ÑÐµÑÐºÐ¾Ð¹ ÑÐ¸ÑÑÐµÐ¼Ñ honeypot, Ð¾Ð±ÐµÑÐ¿ÐµÑÐ¸Ð²Ð°ÑÑÐµÐ¹ ÑÐºÐ¾Ð½Ð¾Ð¼Ð¸Ñ Ð¿Ð¾ÑÑÐµÐ±Ð»ÑÐµÐ¼Ð¾Ð¹ Ð¿Ð°Ð¼ÑÑÐ¸ Ð¸ Ð¿ÑÐ¾ÑÐµÑÑÐ¾ÑÐ½Ð¾Ð³Ð¾ Ð²ÑÐµÐ¼ÐµÐ½Ð¸. 3. Ð Ð°Ð·ÑÐ°Ð±Ð¾ÑÐºÐ° Ð¼ÐµÑÐ¾Ð´Ð° Ð¸Ð½ÑÐµÑÐ°ÐºÑÐ¸Ð²Ð½Ð¾Ð³Ð¾ Ð¿Ð¾ÑÑÑÐ¾ÐµÐ½Ð¸Ñ ÑÐµÑÐ¸ honeypot Ð½Ð° Ð¾ÑÐ½Ð¾Ð²Ðµ Ð°Ð½Ð°Ð»Ð¸Ð·Ð° Ð°ÐºÑÐ¸Ð²Ð½Ð¾ÑÑÐ¸ Ð½Ð°ÑÑÑÐ¸ÑÐµÐ»Ñ Ñ ÑÑÐµÑÐ¾Ð¼ Ð¾Ð³ÑÐ°Ð½Ð¸ÑÐµÐ½Ð¸Ñ ÐºÐ¾Ð»Ð¸ÑÐµÑÑÐ²Ð° Ð´Ð¾ÑÑÑÐ¿Ð½ÑÑ Ð²ÑÑÐ¸ÑÐ»Ð¸ÑÐµÐ»ÑÐ½ÑÑ ÑÐµÑÑÑÑÐ¾Ð². 4. ÐÑÐµÐ½ÐºÐ° ÑÐ°Ð·ÑÐ°Ð±Ð¾ÑÐ°Ð½Ð½Ð¾Ð³Ð¾ Ð¼ÐµÑÐ¾Ð´Ð°. Ð ÑÐ¾Ð´Ðµ ÑÐ°Ð±Ð¾ÑÑ Ð±ÑÐ»Ð° Ð¸ÑÑÐ»ÐµÐ´Ð¾Ð²Ð°Ð½Ð° Ð°ÑÑÐ¸ÑÐµÐºÑÑÑÐ° Ð¸ ÑÐ°Ð±Ð¾ÑÐ° ÑÐµÑÐµÐ¹ honeypot. ÐÑÐ»Ð¸ Ð¿ÑÐ¾Ð°Ð½Ð°Ð»Ð¸Ð·Ð¸ÑÐ¾Ð²Ð°Ð½Ñ ÑÐ¾Ð²ÑÐµÐ¼ÐµÐ½Ð½ÑÐµ Ð¸ÑÑÐ»ÐµÐ´Ð¾Ð²Ð°Ð½Ð¸Ñ Ð² Ð¾Ð±Ð»Ð°ÑÑÐ¸ ÑÐºÑÐ¿Ð»ÑÐ°ÑÐ°ÑÐ¸Ð¸ Ð¸ ÑÑÐ½ÐºÑÐ¸Ð¾Ð½Ð¸ÑÐ¾Ð²Ð°Ð½Ð¸Ñ honeypot ÑÐ¸ÑÑÐµÐ¼. Ð ÑÐµÐ·ÑÐ»ÑÑÐ°ÑÐµ ÑÐ°Ð±Ð¾ÑÑ Ð±ÑÐ» ÑÐ°Ð·ÑÐ°Ð±Ð¾ÑÐ°Ð½ Ð¼ÐµÑÐ¾Ð´ Ð¸Ð½ÑÐµÑÐ°ÐºÑÐ¸Ð²Ð½Ð¾Ð³Ð¾ Ð¿Ð¾ÑÑÑÐ¾ÐµÐ½Ð¸Ñ ÑÐµÑÐ¸ honeypot Ð½Ð° Ð¾ÑÐ½Ð¾Ð²Ðµ Ð°Ð½Ð°Ð»Ð¸Ð·Ð° Ð°ÐºÑÐ¸Ð²Ð½Ð¾ÑÑÐ¸ Ð½Ð°ÑÑÑÐ¸ÑÐµÐ»Ñ Ñ ÑÑÐµÑÐ¾Ð¼ Ð¾Ð³ÑÐ°Ð½Ð¸ÑÐµÐ½Ð¸Ñ ÐºÐ¾Ð»Ð¸ÑÐµÑÑÐ²Ð° Ð´Ð¾ÑÑÑÐ¿Ð½ÑÑ Ð²ÑÑÐ¸ÑÐ»Ð¸ÑÐµÐ»ÑÐ½ÑÑ ÑÐµÑÑÑÑÐ¾Ð², Ð° ÑÐ°ÐºÐ¶Ðµ Ð¿ÑÐµÐ´Ð»Ð¾Ð¶ÐµÐ½ ÐºÐ¾Ð¼Ð¿Ð¾Ð½ÐµÐ½Ñ ÑÐµÑÐ¸ honeypot, ÑÐµÐ°Ð³Ð¸ÑÑÑÑÐ¸Ð¹ Ð½Ð° ÑÐºÐ°Ð½Ð¸ÑÐ¾Ð²Ð°Ð½Ð¸Ðµ Ð¸ ÑÐºÐ¾Ð½Ð¾Ð¼ÑÑÐ¸Ð¹ Ð²ÑÑÐ¸ÑÐ»Ð¸ÑÐµÐ»ÑÐ½ÑÐµ ÑÐµÑÑÑÑÑ. ÐÐ¾Ð»ÑÑÐµÐ½Ð½ÑÐµ ÑÐµÐ·ÑÐ»ÑÑÐ°ÑÑ Ð¼Ð¾Ð³ÑÑ Ð±ÑÑÑ Ð¸ÑÐ¿Ð¾Ð»ÑÐ·Ð¾Ð²Ð°Ð½Ñ Ð² ÐºÐ°ÑÐµÑÑÐ²Ðµ Ð¾ÑÐ½Ð¾Ð²Ñ Ð´Ð»Ñ Ð¿Ð¾ÑÑÑÐ¾ÐµÐ½Ð¸Ñ ÑÐµÑÑÑÑÐ¾ÑÑÑÐµÐºÑÐ¸Ð²Ð½ÑÑ Ð´Ð¸Ð½Ð°Ð¼Ð¸ÑÐµÑÐºÐ¸Ñ ÑÐµÑÐµÐ¹ honeypot.
description: The research set the following goals: 1. Analyzing existing methods and tools for building dynamic honeypot systems. 2. Development of an architecture of the dynamic honeypot system that provides savings in memory consumption and processor time. 3. Development of a method of interactive construction of honeypot network based on analyzing the activity of the intruder, considering the limitation of the amount of available computing resources. 4. Evaluation of the developed method. During the work the architecture and operation of honeypot networks were studied. Modern studies in the field of operation and functioning of honeypot systems were analyzed. The work resulted in development of a method of interactive construction of honeypot network based on analyzing the activity of the intruder considering the limitation of the number of available computational resources, and a component of honeypot network responding to scanning and saving computational resources was proposed. The results can be used as a base for the construction of resource-efficient dynamic honeypot networks.