In order to protect an organization's network infrastructure, a so-called Honeypot mechanism is often used to detect, prevent or in some way counteract attempts to unauthorized use of information systems. To this end, systems incorporating several honeypot functions and services are often used, rather than just a single honeypot server. These systems trap attackers, trying to attract attention by simulating real services and environments. The aim is to attract and divert the attacker's attention from the real network. The main goal of our research is to build a framework for measuring the effectiveness of honeypots and to optimize honeypots based on the metrics. The honeypot system built in our SOC-supported network is tested by means of Capture the Flag (CtF) contests advertised among students. Here we have embedded CtF challenges in honeypot services that students have to find in a given time interval.

Related thesis / dissertation topics HERE...

• Honepot-ok adott infrastruktúrához igazított optimalizásása
• Dinamikus honeypot rendszerek kialakítása, vizsgálata
• Honeypot rendszer fejlesztése és a honeypot rendszerek monitorozására alapuló módszerek feltérképezése kiberbiztonság területén
• Támadók viselkedésének profilozása