CORDIS - EU research results
CORDIS

NoAH: a European Network of Affined Honeypots

Objective

In the last few years, we have been witnessing an increasing number of cyberattacks on the Internet. Viruses, worms, trojans, spyware and other types of malicious programs are discouraging the effective use of the Internet, and crippling the IT infrastruc ture. Recent studies have pointed out that attackers already posses the technology to take over a large fraction of the Internet within minutes. At these time scales, human reaction to an attack may be impossible. To combat such threats, we need an infra structure to assist in detecting and containing such attacks. The goal of NoAH is to produce a design study and perform the necessary technical work towards the development of an infrastructure for security monitoring based on honeypot technology. Honeyp ots are computer systems that do not provide regular production services. Instead, they are intentionally vulnerable and at the same time closely monitored systems that wait to be compromised by attackers. Once hit, honeypots can be used to analyze atta cks. In NoAH, honeypots will be used as early-warning systems capable of detecting attacks at the early stages of their infestation. By correlating data received by geographically distributed honeypots, NoAH will able to detect cyber-attacks before they have the chance to do any major damage. To contain the spread of attacks once detected, NoAH will explore the possibilities for generating automated attack signatures, or other containment-related information that may be used by security appliances. NoAH will provide a valuable distributed security analysis infrastructure: ISPs and NRNs will be able to reduce the security risks of their services; information security organizations will be able to better assess threats, risks and damage in a more timely fashion; security analysts and researchers will gain access to a wealth of data as well as a large experimental testbed, that will significantly boost the effectiveness of their activities.

Call for proposal

FP6-2003-INFRASTRUCTURES-4
See other projects for this call

Coordinator

FOUNDATION FOR RESEARCH AND TECHNOLOGY - HELLAS
EU contribution
No data
Address
Vasilika Vouton
1527 IRAKLION CRETE
Greece

See on map

Total cost
No data

Participants (7)