TU Darmstadt / ULB / TUbiblio

This Network is Infected: HosTaGe - a Low-Interaction Honeypot for Mobile Devices

Vasilomanolakis, Emmanouil ; Karuppayah, Shankar ; Fischer, Mathias ; Mühlhäuser, Max ; Plasoianu, Mihai ; Pfeiffer, Wulf ; Pandikow, Lars (2013)
This Network is Infected: HosTaGe - a Low-Interaction Honeypot for Mobile Devices.
Proceedings of the third ACM workshop on Security and privacy in smartphones and mobile devices. New York, NY, USA
Konferenzveröffentlichung, Bibliographie

Kurzbeschreibung (Abstract)

In recent years, the number of sophisticated cyber attacks has increased rapidly. At the same time, people tend to utilize unknown, in terms of trustworthiness, wireless net- works in their daily life. They connect to these networks, e.g., airports, without knowledge of whether they are safe or infected with actively propagating malware. In traditional networks, malicious behavior can be detected via Intrusion Detection Systems (IDSs). However, IDSs cannot be applied easily to mobile environments and to resource constrained devices. Another common defense mechanism is honeypots, i.e., systems that pretend to be an attractive target to at- tract malware and attackers. As a honeypot has no pro- ductive use, each attempt to access it can be interpreted as an attack. Hence, they can provide an early indication on malicious network environments. Since low interaction honeypots do not demand high CPU or memory require- ments, they are suitable to resource constrained devices like smartphones or tablets. In this paper we present the idea of Honeypot-To-Go. We envision portable honeypots on mobile devices that aim on the fast detection of malicious networks and thus boost the security awareness of users. Moreover, to demonstrate the feasibility of this proposal we present our prototype HosTaGe, a low-interaction honeypot implemented for the Android OS. We present some initial results regarding the performance of this application as well as its ability to de- tect attacks in a realistic environment. To the best of our knowledge, HosTaGe is the first implementation of a generic low-interaction honeypot for mobile devices.

Typ des Eintrags: Konferenzveröffentlichung
Erschienen: 2013
Autor(en): Vasilomanolakis, Emmanouil ; Karuppayah, Shankar ; Fischer, Mathias ; Mühlhäuser, Max ; Plasoianu, Mihai ; Pfeiffer, Wulf ; Pandikow, Lars
Art des Eintrags: Bibliographie
Titel: This Network is Infected: HosTaGe - a Low-Interaction Honeypot for Mobile Devices
Sprache: Englisch
Publikationsjahr: November 2013
Ort: New York, NY, USA
Verlag: ACM
Reihe: SPSM '13
Veranstaltungstitel: Proceedings of the third ACM workshop on Security and privacy in smartphones and mobile devices
Veranstaltungsort: New York, NY, USA
Kurzbeschreibung (Abstract):

In recent years, the number of sophisticated cyber attacks has increased rapidly. At the same time, people tend to utilize unknown, in terms of trustworthiness, wireless net- works in their daily life. They connect to these networks, e.g., airports, without knowledge of whether they are safe or infected with actively propagating malware. In traditional networks, malicious behavior can be detected via Intrusion Detection Systems (IDSs). However, IDSs cannot be applied easily to mobile environments and to resource constrained devices. Another common defense mechanism is honeypots, i.e., systems that pretend to be an attractive target to at- tract malware and attackers. As a honeypot has no pro- ductive use, each attempt to access it can be interpreted as an attack. Hence, they can provide an early indication on malicious network environments. Since low interaction honeypots do not demand high CPU or memory require- ments, they are suitable to resource constrained devices like smartphones or tablets. In this paper we present the idea of Honeypot-To-Go. We envision portable honeypots on mobile devices that aim on the fast detection of malicious networks and thus boost the security awareness of users. Moreover, to demonstrate the feasibility of this proposal we present our prototype HosTaGe, a low-interaction honeypot implemented for the Android OS. We present some initial results regarding the performance of this application as well as its ability to de- tect attacks in a realistic environment. To the best of our knowledge, HosTaGe is the first implementation of a generic low-interaction honeypot for mobile devices.

Freie Schlagworte: Mobile Honeypot, Malware, Security, Android
Fachbereich(e)/-gebiet(e): 20 Fachbereich Informatik
20 Fachbereich Informatik > Telekooperation
Hinterlegungsdatum: 27 Apr 2015 15:12
Letzte Änderung: 14 Jun 2021 06:14
PPN:
Export:
Suche nach Titel in: TUfind oder in Google
Frage zum Eintrag Frage zum Eintrag

Optionen (nur für Redakteure)
Redaktionelle Details anzeigen Redaktionelle Details anzeigen