SDN Based Intelligent Honeynet Network Model Design and Verification

Abstract

To solve the problems of high cost and inflexibility of traditional honeynet, next-generation honeynet based on SDN attracts the attention of researchers. This paper proposes a three layers' network model of next-generation intelligent honeynet via SDN. Based on this model, the intelligent honeynet includes “two mechanisms and three modules”. The “two mechanisms” are attack migration mechanism and topology management mechanism. The “three modules” are attack detection module, policy generation module and honeynet management module. Then, this paper implements a concept demonstration honeynet to valid the concepts and methods proposed by this paper. Finally, to verify the validity of concept demonstration honeynet, two experiments are presented. Results show that the network model enhances the traditional honeynet's ability to control malicious data traffic and traps attacks, and improves network deception.