Scalable Honeypot Architecture for Identifying Malicious Network Activities

Server honeypots are computer systems that hide in a network capturing attack packets. As the name goes, server honeypots are installed in server machines running a set of services. Enterprises and government organisations deploy these honeypots to know the extent of attacks on their network. Since, most of the recent attacks are advanced persistent attacks there is much research work going on in building better peripheral security measures. In this paper, the authors have deployed several honeypots in a virtualized environment to gather traces of malicious activities. The network infrastructure is resilient and provides much information about hacker's activities. It is cost-effective and can be easily deployed in any organisation without specialized hardware.