NoSEBrEaK - Attacking Honeynets
Abstract
It is usually assumed that Honeynets are hard to detect and that attempts to detect or disable them can be unconditionally monitored. We scrutinize this assumption and demonstrate a method how a host in a honeynet can be completely controlled by an attacker without any substantial logging taking place.
- Publication:
-
arXiv e-prints
- Pub Date:
- June 2004
- DOI:
- 10.48550/arXiv.cs/0406052
- arXiv:
- arXiv:cs/0406052
- Bibcode:
- 2004cs........6052D
- Keywords:
-
- Computer Science - Cryptography and Security;
- Computer Science - Computers and Society;
- K.6.5;
- K.5.m
- E-Print:
- Proceedings from the fifth IEEE Systems, Man and Cybernetics Information Assurance Workshop, Westpoint, 2004