TU Darmstadt / ULB / TUbiblio

This Network is Infected: HosTaGe - a Low-Interaction Honeypot for Mobile Devices

Vasilomanolakis, Emmanouil and Karuppayah, Shankar and Fischer, Mathias and Mühlhäuser, Max and Plasoianu, Mihai and Pfeiffer, Wulf and Pandikow, Lars (2013):
This Network is Infected: HosTaGe - a Low-Interaction Honeypot for Mobile Devices.
New York, NY, USA, ACM, In: Proceedings of the third ACM workshop on Security and privacy in smartphones and mobile devices, New York, NY, USA, In: SPSM '13, ISBN 978-1-4503-2491-5,
[Conference or Workshop Item]

Abstract

In recent years, the number of sophisticated cyber attacks has increased rapidly. At the same time, people tend to utilize unknown, in terms of trustworthiness, wireless net- works in their daily life. They connect to these networks, e.g., airports, without knowledge of whether they are safe or infected with actively propagating malware. In traditional networks, malicious behavior can be detected via Intrusion Detection Systems (IDSs). However, IDSs cannot be applied easily to mobile environments and to resource constrained devices. Another common defense mechanism is honeypots, i.e., systems that pretend to be an attractive target to at- tract malware and attackers. As a honeypot has no pro- ductive use, each attempt to access it can be interpreted as an attack. Hence, they can provide an early indication on malicious network environments. Since low interaction honeypots do not demand high CPU or memory require- ments, they are suitable to resource constrained devices like smartphones or tablets. In this paper we present the idea of Honeypot-To-Go. We envision portable honeypots on mobile devices that aim on the fast detection of malicious networks and thus boost the security awareness of users. Moreover, to demonstrate the feasibility of this proposal we present our prototype HosTaGe, a low-interaction honeypot implemented for the Android OS. We present some initial results regarding the performance of this application as well as its ability to de- tect attacks in a realistic environment. To the best of our knowledge, HosTaGe is the first implementation of a generic low-interaction honeypot for mobile devices.

Item Type: Conference or Workshop Item
Erschienen: 2013
Creators: Vasilomanolakis, Emmanouil and Karuppayah, Shankar and Fischer, Mathias and Mühlhäuser, Max and Plasoianu, Mihai and Pfeiffer, Wulf and Pandikow, Lars
Title: This Network is Infected: HosTaGe - a Low-Interaction Honeypot for Mobile Devices
Language: English
Abstract:

In recent years, the number of sophisticated cyber attacks has increased rapidly. At the same time, people tend to utilize unknown, in terms of trustworthiness, wireless net- works in their daily life. They connect to these networks, e.g., airports, without knowledge of whether they are safe or infected with actively propagating malware. In traditional networks, malicious behavior can be detected via Intrusion Detection Systems (IDSs). However, IDSs cannot be applied easily to mobile environments and to resource constrained devices. Another common defense mechanism is honeypots, i.e., systems that pretend to be an attractive target to at- tract malware and attackers. As a honeypot has no pro- ductive use, each attempt to access it can be interpreted as an attack. Hence, they can provide an early indication on malicious network environments. Since low interaction honeypots do not demand high CPU or memory require- ments, they are suitable to resource constrained devices like smartphones or tablets. In this paper we present the idea of Honeypot-To-Go. We envision portable honeypots on mobile devices that aim on the fast detection of malicious networks and thus boost the security awareness of users. Moreover, to demonstrate the feasibility of this proposal we present our prototype HosTaGe, a low-interaction honeypot implemented for the Android OS. We present some initial results regarding the performance of this application as well as its ability to de- tect attacks in a realistic environment. To the best of our knowledge, HosTaGe is the first implementation of a generic low-interaction honeypot for mobile devices.

Series Name: SPSM '13
Place of Publication: New York, NY, USA
Publisher: ACM
ISBN: 978-1-4503-2491-5
Uncontrolled Keywords: Mobile Honeypot, Malware, Security, Android
Divisions: 20 Department of Computer Science > Telecooperation
20 Department of Computer Science
Event Title: Proceedings of the third ACM workshop on Security and privacy in smartphones and mobile devices
Event Location: New York, NY, USA
Date Deposited: 27 Apr 2015 15:12
Export:

Optionen (nur für Redakteure)

View Item View Item