Journal of Beijing University of Posts and Telecommunications

  • EI核心期刊

JOURNAL OF BEIJING UNIVERSITY OF POSTS AND TELECOM ›› 2015, Vol. 38 ›› Issue (6): 104-108,119.doi: 10.13190/j.jbupt.2015.06.021

• Reports • Previous Articles     Next Articles

A Dynamic Virtual Honeynet System Using Openflow

HU Yi-xun, ZHENG Kang-feng, WU Bin, YANG Yi-xian   

  1. Information Security Center, Beijing University of Posts and Telecommunications, Beijing 100876, China
  • Received:2014-11-27 Online:2015-12-28 Published:2015-12-28

Abstract:

A dynamic vitual honeynet system using Openflow is proposed to solve the pain point of traffic control in the current honeynet system. This system is established on software defined network architecture with Openflow switch and controller and replaces the existing semi-software forwarding solution which is based on redirection gateway. A virtual honeypot system is designed to virtualize any host with any services and to adjust the honeypot structure dynamically. A new concept of overlay virtual honeynet which defines running multiple virtual honeynets in one honeynet physical entity is advocated. The experimental results in deployed designed honeynet system verify the low forwarding delay of forwarding scheme based on Openflow, dynamic property of honeynet system, and effectiveness of overlay virtual honeynet system.

Key words: Openflow, software defined network, honeynet, overlay virtual honeynet

CLC Number: