Buckler:Intrusion Detection & Prevenation Using Honeypot

Abstract

Recently, as result of dramatic connectivity between devices from a computer to mobile systems, security of information and availability of the services become more and more challenging. Internet usage is growing daily the world is coming closer making it a smaller place to live for its users. However, it has also managed to create problems for people because of the increase in cyber-crimes. So there is a need for monitoring and analyzing both user and system activities and thus tracking as well as blocking the malware is a must. This is where intrusion detection system (IDS) and intrusion prevention system (IPS) comes into the picture. One of the most efficient methods to stop network attacks is using IDS/IPS Systems. The ultimate goal of an IDPS system is to stop security attacks before they have been carried successfully. To detect or prevent network attacks, a network intrusion detection (NID) system may be equipped with machine learning algorithms to achieve better accuracy and faster detection speed. The majority of intrusion prevention systems use the detection methods which include Signature-based, Statistical anomaly-based and Honey pot based. Using these detection methods, the malware is detected, and then further actions are taken to block the malware. IPS techniques differ in how they scan the data streams to detect a threat or intrusion. Data capture and data control are used by the research community to study issues in network security, such as Internet worms, spam control, and Denial of Service (DoS) attacks. In this paper, we will be focusing on prevention from the various types of attack. This paper proposes new framework &methodology that implements IDS & IPS within the honeypot withreal time network packet capturing &intrusions detection along with embedded firewall for intrusion prevention,which make the proposed honeypotmore effective and efficient than existing honeypots. The goal of this paper is to propose and design a portable java based real time packet capturing with intrusion detection & preventionhoneypot for windows based operating system. This honeypot is designed keeping Research honeypots in mind but it can be used in virtualized environment also