An Experimental Study of SSH Attacks by using Honeypot Decoys

We studied Brute-force SSH attacks carried out on six different universities campus networks by using Honeypot Techniques. Brute-force password guessing attacks against SSH, FTP and telnet servers are the most common form of at- tack to compromise servers facing the internet. A key factor to avoid d...

Full description

Saved in:
Bibliographic Details
Published in:Indian journal of science and technology 2013-12, Vol.6 (12), p.5567-5567
Main Authors: Kheirkhah, Esmaeil, Amin, Sayyed Mehdi Poustchi, Sistani, Hediyeh AmirJahanshahi, Acharya, Haridas
Format: Article
Language:English
Subjects:
Decoys
Effectiveness
Internet
Lists
Networks
Passwords
Servers
Tables (data)
Online Access:Get full text
Tags: Add Tag
No Tags, Be the first to tag this record!
Description
Summary:We studied Brute-force SSH attacks carried out on six different universities campus networks by using Honeypot Techniques. Brute-force password guessing attacks against SSH, FTP and telnet servers are the most common form of at- tack to compromise servers facing the internet. A key factor to avoid disruption of these networks is to defend it against Brute-force attacks. We focused on the attempts to gain remote access to our SSH Honeypots Plus Tools and techniques employed. There are striking similarities in the methods used to attack these dissimilar systems. The evidence shows that, pre-compiled lists of usernames and passwords that are widely shared form the basis for brute-force attacks. When the passwords were analysed, it was found that in the event of actual malicious traffic what was commonly understood to be strong password did not protect the systems from being compromised. The data from the study were used to evaluate the efficacy of a variety of techniques designed to defend the systems against these attacks. Table 17 lists some commonly recommendation for the protection of SSH servers.
ISSN:0974-6846