Optimization of Virtual Honeynet with Implementation of Host Machine as Honeywall

Abstract

A Honeynet System is widely deployed by the information security researchers for studying different types of attack pattern and methodology. It helps to determine best security practices & solution. It assists security researchers to conduct research in the field of cyber security. Easiest way of deploying honeynet system is by using open sourced honeywall Roo developed by honeynet project. Honeywall Roo can be implemented in Virtual Honeynet within virtual environment. Virtual machine based honeywall implementation do not take advantages of underlying architecture. It is also resource intensive and bulky. Hence new architecture has been proposed in this thesis work. In proposed architecture, host machine on which honeynet system has been deployed will act as honeywall and it has improved data control and capture mechanism based upon the type of honeypots. New enhanced architecture support hybrid honeypots framework for malware collection. Implementation is specific to Linux based host machine having single network interface card deployed in distributed environment. Security of host machine is of utmost importance and hence special techniques are discussed to ensure its security and methods to mitigate security risk associated with host and virtual machines.