Diseño e implementación de un prototipo de HONEYNET en la red de datos de la Escuela Politécnica Nacional

Abstract

This project focuses on the design and implementation of a virtual self-contained honeynet prototype which is connected to the data network of the EPN and provides services such as: DNS, DHCP, FTP, mail, and web. These services are presented to the data network and Internet as vulnerable in order to attract attackers to them and capture information from their activities. Currently the information security tends to have a proactive component, which foundation is to recognize the behavior of the attackers. The attackers’ behavior will be tracked by their tries to gain full access to restricted systems, or when they engage a compromised system in malicious activities. Honeynets have in general control and capture modules that help to analyze data related to malicious activities which are executed within them. As a result, the information analysis will help to protect in a proactive manner the elements of the EPN’s production data network.