Detection Technique to trace IP behind VPN/Proxy using Machine Learning

Abstract

Cybercriminals use a variation of techniques to fleece their digital footprints, that creates a barrier for law enforcement agencies to impossibly catch and prosecute them. With the known universal truth that whenever a machine tries to connect in adversely to target system. The victim’s machine can see only requests coming from the “proxy” or the VPN server. Now as VPN hides IP addresses it leads the network to be redirected through some special configured remote server which are run by a VPN host. As its consequences, the user’s digital footprint is hidden. the footprint of a VPN server is received by the receiver. This challenges the entire organization or one’s personal system to be in risk. One such solution to the problem is to design “Honeypot system” that will trace an IP address running behind VPN/proxy servers. The machine learning algorithm will able to trace the actual IP address with ISP details. The paper discusses a detection mechanism that will dupe the attackers. Showing inability in locating and identifying real honeypot file. The methods were tested on various platforms and technique outperform in detecting attacker’s system smartly using machine learning.