AVOIDING CYBER-ATTACKS TO DMZ AND CAPTURING FORENSICS FROM INTRUDERS USING HONEYPOTS

Q: How can I download an article?

To download an article from SID, first log in to the site, search for the article title, and click on the 'Download Article' option.

Q: How can I download an ISI article?

To download an ISI article on SID, enter the keyword or article title in the search bar, view the relevant results, click on the desired article, and select the 'Download Article' option.

Q: How can I access the SID database?

To access the SID database, visit SID.ir, create an account, and log in to access scientific resources.

Q: Is downloading articles from SID free?

Some articles on SID are available for free, while others require payment. Details are specified on the article's page.

SALIMI ALI; KABIRI PEYMAN

مرکز اطلاعات علمی Scientific Information Database (SID) - Trusted Source for Research and Academic Resources

Journal Paper

Paper Information

Journal: JOURNAL OF ADVANCES IN COMPUTER RESEARCH Year:2012 | Volume:3 | Issue:1 Page(s): 65-79

Download Full-Text

View:

562

Download:

320

Cites:

Information Journal Paper

Title

AVOIDING CYBER-ATTACKS TO DMZ AND CAPTURING FORENSICS FROM INTRUDERS USING HONEYPOTS

Author(s)

SALIMI ALI | KABIRI PEYMAN | Issue Writer Certificate

Keywords

INTRUSION DETECTION

FORENSICS

DEMILITARIZED ZONE

HONEYPOT

Abstract

Nowadays, HONEYPOTs are widely used to divert attackers from the original target and keep them busy within a decoy environment. DEMILITARIZED ZONE (DMZ) is an important zone for network administrators, because many of the services to the public network is provided at this zone. Many of the security tools such as firewalls, INTRUSION DETECTION systems and several other security systems can be used to secure DMZ. But HONEYPOTs are supplementary devices used to discover attacks and capture FORENSICS against the attackers. The most important solution to secure the DMZ is to detect attacks against servers of this zone and void these intrusions by leading them to HONEYPOTs and capturing enough FORENSICS against the attackers. This research work is focused on providing a solution for problem areas such as response to intrusion attempts and redirection of the intruders to HONEYPOTs. The proposed system detects malicious activities and redirects them to a decoy system to capture FORENSICS. HONEYPOTs are decoy systems used to interact with attackers and capture FORENSICS from their activities. In the reported work, detection of the malicious activities is carried-out using a Network-based INTRUSION DETECTION System (NIDS). Measuring performance of the proposed system, three important factors are implemented. These factors include accuracy, false positive rate and true positive rate. Accuracy is presented as an important factor to check the performance of the system. In our simulations, the measured accuracy is more than 99 percent. False positive rate is another important factor of this system that shows the failure rate. This parameter is measured less than 0.50 percent that shows the proposed system cannot detect all the attacks against the protected machine, but attack detection is performed using a suitable rate. The last factor of system performance is true positive rate that is measured to be 100 percent. This measurement shows that all of the legitimate traffic is directed to protected machine with proposed system.

Cites

No record.

References

Cite

APA: Copy

SALIMI, ALI, & KABIRI, PEYMAN. (2012). AVOIDING CYBER-ATTACKS TO DMZ AND CAPTURING FORENSICS FROM INTRUDERS USING HONEYPOTS. JOURNAL OF ADVANCES IN COMPUTER RESEARCH, 3(1), 65-79. SID. https://sid.ir/paper/328684/en

Vancouver: Copy

SALIMI ALI, KABIRI PEYMAN. AVOIDING CYBER-ATTACKS TO DMZ AND CAPTURING FORENSICS FROM INTRUDERS USING HONEYPOTS. JOURNAL OF ADVANCES IN COMPUTER RESEARCH[Internet]. 2012;3(1):65-79. Available from: https://sid.ir/paper/328684/en

IEEE: Copy

ALI SALIMI, and PEYMAN KABIRI, “AVOIDING CYBER-ATTACKS TO DMZ AND CAPTURING FORENSICS FROM INTRUDERS USING HONEYPOTS,” JOURNAL OF ADVANCES IN COMPUTER RESEARCH, vol. 3, no. 1, pp. 65–79, 2012, [Online]. Available: https://sid.ir/paper/328684/en

Related Journal Papers

No record.

Related Seminar Papers

No record.

Related Plans

No record.

Recommended Workshops