Abstract
Internet of Things (IoT) devices are vulnerable against attacks because of their limited network resources and complex operating systems. Thus, honeypot is a good method of
capturing malicious requests and collecting malicious samples but is rarely used on the IoT. Accordingly, this research implements three kinds of honeypots to capture malicious behaviors. First , on the basis of the CVE-2017-17215 vulnerability, we implement a medium-high interaction honeypot that can simulate a specific series of router UPnP services. It has functions such as service simulation, log recording, malicious sample download, and service selfcheck. Second, given the limited details available for the simulated UPnP service and to help the honeypot respond to unrecognizable malicious requests, we use the actual IoT device firmware that matches the vulnerability to build a high-interaction honeypot. In addition, we investigate the most exposed SOAP service ports
and design corresponding multi-port honeypot to improve the capacity of the honeynet, providing a hybrid service from a real device and simulating honeypots. The Docker in the honeynet, which reduces the volume of the honeypot and realizes the rapid deployment of the honeynet, encapsulates all these honeypots. Moreover, the honeynet control center is simultaneously designed to distribute commands and transfer files to each physical node
in the honeynet. We implemented the proposed honeynet system and deployed it in practice. We have successfully caught many unknown malicious attacks excluded in the VT, which proved the effectiveness of the proposed framework.
Modules
Algorithms
Software And Hardware
• Hardware: Processor: i3 ,i5 RAM: 4GB Hard disk: 16 GB Raspberry pi/arduino,other hardware components (please call) • Software: operating System : Windws2000/XP/7/8/10 Anaconda,jupyter,spyder,flask Frontend :-python Backend:- MYSQL