Darknet Traffic Monitoring using Honeypot

  Hemal khorasia,  Mr. Girish Khilari

: A "Darknet" is a portion of routed, unallocated IP space in which no active services or servers reside. any packet entering a Darknet should not be valid traffic, It could reach it due to errors such as poor security policies The fineness of the Darknet is that it cuts down considerably on the false positives for any device or technology. Darknet monitoring, in which there are no legitimate computers and no reason that legitimate traffic would be monitored. The darknet collects traffic as a result of wide range of events, including misconfiguration (e.g., a human being mis-typing an IP address) High interaction and low-interaction honeypots are trap systems deployed in a darknet that pretend vulnerable computers to attract attacks and collect malware samples. Monitoring network packets on more than one network is important because each network may be biased in the traffic it is receiving. To overcome the bias problem, with distributed multiple networks rather than a single network with large address blocks. We develop network monitoring system for some organization use and try to conduct network monitoring unused address spaces.

Keywords- DarkIP , honeypot, malware,ids,unused ip,worm,virus,dos,honeyd.

Unique Identification Number - IJEDR1502097
Page Number(s) - 518-524
Pubished in - Volume 3 | Issue 2 | May 2015
DOI (Digital Object Identifier) -   
Publisher - IJEDR (ISSN - 2321-9939)

  Hemal khorasia,  Mr. Girish Khilari,   "Darknet Traffic Monitoring using Honeypot", International Journal of Engineering Development and Research (IJEDR), ISSN:2321-9939, Volume.3, Issue 2, pp.518-524, May 2015, Available at :http://www.ijedr.org/papers/IJEDR1502097.pdf