THE EFFICACY OF HONEYNET DETERRENCE

This dissertation explores the efficacy of honeynet technology in enhancing cybersecurity defenses, particularly within residential network environments. The research investigates three key areas: the potential of malware to detect network redirection, the protection of home networks through overt honeynet redirection, and the validation of IP address reputation scores via honeynet interactions. Findings indicate that self-propagating malware programs are not sensitive to network redirection, supporting its use for moving network traffic into honeynets without altering behavior. Additionally, redirecting unsolicited traffic to an overt cloud-based honeynet showed a reduction in subsequent malicious connections, suggesting its utility as a supplementary security measure for home networks.Finally, this work explored the validation of IP address reputation scores through honeynet interactions, revealing discrepancies in traditional assessments and emphasizing the importance of dynamic validation. By observing how IP addresses behave when confronted with a honeynet, the research aims to develop a more robust and accurate method for assessing their true intent. These findings underscore the transformative potential of honeynet technology in bolstering residential network defenses, offering a promising approach to addressing the asymmetric attacker advantage in the attacker-defender relationship. The integration of honeynets into cybersecurity practices holds the potential to transform the way threats are detected and deterred, offering a proactive and resilient defense strategy for unskilled defenders.

Author

• Edge, Eric

• Deterrence
• Honeynet
• IP Address Reputation
• Malicious
• Network Redirection

Identifier

hdl:1920/14705

OAI identifier oai:identifier

oai:MARS:1920/14705