Mimicry honeypot: an evolutionary decoy system. (24th July 2019)

• Record Type: Journal Article
• Authors: Shi, Leyi; Cui, Yuwen; Han, Xu; Chen, Honglong; Liu, Deli
• Is Part Of: International journal of high performance computing and networking. Volume 14:Number 2(2019)
• Page Start: 157
• Page End: 164
• Publication Date: 2019-07-24
• Subjects: mimicry honeypot -- warning coloration -- protective coloration -- evolution -- genetic algorithm; High performance computing -- Periodicals; Computer networks -- Periodicals; High performance computing; Periodicals; 004.05
• Languages: English
• ISSNs: 1740-0562

Abstract

Motivated by the mimic-and-evolve phenomenon for species rivalry, we present a novel concept of mimicry honeypot, which can bewilder the adversaries through comprehensively exploiting the protective coloration, warning coloration and mimicry evolution according to the changes of network circumstance. The paper firstly gives the definition of the protective coloration and warning coloration for cyber defence, formalises the mimicry honeypot model, discusses the environment perception and mimicry evolution issues, and implements a mimicry prototype through web service platform and genetic algorithm. Afterwards, we perform experiments with the mimicry prototype deployed both in our private campus network and on the internet. Our empirical study demonstrates that the mimicry honeypot has better efficiency than the traditional decoy system.