Novel Technique for Detecting Unknown Threats Using Honeynet Instead of Purple Teaming in Organizations

John, Jithin Paul (2022) Novel Technique for Detecting Unknown Threats Using Honeynet Instead of Purple Teaming in Organizations. Masters thesis, Dublin, National College of Ireland.

Preview	PDF (Master of Science) Download (1MB) | Preview
Preview	PDF (Configuration manual) Download (1MB) | Preview

Abstract

Unknown threats are one of the key problems facing the contemporary cybersecurity industry. New dangers and attacks appear every day, along with the development of extremely complex techniques and instruments used to employ them. It is getting harder to identify and stop these assaults because of how sophisticated they are. Organizations currently use purple teaming exercises to identify and defend against novel cyber threats using the knowledge of the red team and blue team. Setting up rules in IDS will only recognize attacks that are behaviour-based and signature-based due to limitations with the engineers' skills. Manual, irregular testing is insufficient to ensure that control gaps don't appear, sometimes undetected for days. To prevent attackers from exploiting loopholes, continuous testing and validation are required, but they are nearly unachievable without automation. To address these issues, this research suggests a novel detection technique that makes use of a web application honeypot or honey network. The construction of web-based honeypots is straightforward and devoid of complex architectural designs, and they create noticeably fewer false positives than traditional systems.

Item Type:	Thesis (Masters)
Supervisors:	Name Email Khan, Imran UNSPECIFIED
Subjects:	Q Science > QA Mathematics > Electronic computers. Computer science T Technology > T Technology (General) > Information Technology > Electronic computers. Computer science Q Science > QA Mathematics > Computer software > Computer Security T Technology > T Technology (General) > Information Technology > Computer software > Computer Security
Divisions:	School of Computing > Master of Science in Cyber Security
Depositing User:	Tamara Malone
Date Deposited:	28 Apr 2023 15:33
Last Modified:	28 Apr 2023 15:33
URI:	https://norma.ncirl.ie/id/eprint/6524

Actions (login required)

View Item