Publication: Distributed Honeypot log management and visualization of attacker geographical distribution
Issued Date
2011-07-21
Resource Type
Other identifier(s)
2-s2.0-79960410676
Rights
Mahidol University
Rights Holder(s)
SCOPUS
Bibliographic Citation
Proceedings of the 2011 8th International Joint Conference on Computer Science and Software Engineering, JCSSE 2011. (2011), 23-28
Suggested Citation
Vasaka Visoottiviseth, Uttapol Jaralrungroj, Ekkachai Phoomrungraungsuk, Pongpak Kultanon Distributed Honeypot log management and visualization of attacker geographical distribution. Proceedings of the 2011 8th International Joint Conference on Computer Science and Software Engineering, JCSSE 2011. (2011), 23-28. doi:10.1109/JCSSE.2011.5930083 Retrieved from: https://repository.li.mahidol.ac.th/handle/123456789/11783
Research Projects
Organizational Units
Authors
Journal Issue
Thesis
Title
Distributed Honeypot log management and visualization of attacker geographical distribution
Other Contributor(s)
Abstract
Honeypot is a prominent technology that helps us learn new hacking techniques from attackers and intruders. The much information from multiple Honeypot servers, the more appropriate signatures we can generate. To ease the administrator to manage and monitor trace files from multiple Honeypot servers that are distributed in various locations at the same time, in this paper we design and implement a prototype of log management server to automatically and periodically collect log files from them. Information reported by each Honeypot server will be sent in secure manner to the log management server. The log management server then parses the information into the database server, where users can search for specific information through the web interface, such as searching based on one or two Honeypot servers. Moreover, the geographical distribution of attackers is visualized in the world map by utilizing the WHOIS database and GeoPlot software. © 2011 IEEE.