Enhancing Honeypot Deception Capability Through Network Service Fingerprinting

Honeypot is designed to lure attackers away from the computer resources the attackers are trying to compromise. In addition, honeypot also tracks attacker's activities and helps researchers learn about their attack patterns. However, honeypot can also be identified by attackers using various fingerprinting methods. In this research, we use threat modeling to identify potential threats that reveal its existence which made honeypot ineffective. Various countermeasures are discussed and the proposed countermeasures have proved effective to enhance the deception capability of the honeypots we tested.