A Honeypot System Based On Honeyd The Technology For Detecting The Botnet

The new generation of hackers, who have high intelligence quotient and the lack of moral sense of responsibility, was funded by some organized crime group and spam manufacturers, and created a deadly exhaustive virus-botnet. A botnet is the key core of the well-organized global network crime chain. It use bots theft bandwidth, and obtain illegal benefit through network activity. In contrast, the traditional passive network security measures fall down when they face to the botnet.In recent years, honeypot, as a new network security technology, has played a significant role in botnet detection and monitoring. In this paper, I will introduce a honeypot system based on honeyd, which is a virtual honeypot software based on open source. By using the honeyd’s plugin Honeycomb, it can automatic generate the detection feature formation rules code for the network intrusion detection system based on Snort. Thus, it can reduce the fail to Snort. At last, through the concrete experiment, this paper realized honeypot system based on honeyd. And this paper introduced the principle of honeyd and Honeycomb through the acquisition of experimental data. Therefore, the honeypot system is feasible.