Hybrid System Between Anomaly Based Detection System and Honeypot to Detect Zero Day Attack

摘要

Honeypots are systems designed to lure the potential attacker to a real system by make him busy with emulated system. Its primary objective is gathering information about the attacker as possible to avoid any future similar attacks. Another method for protecting the systems against attacks is anomaly based detection system, where its main goal is to monitor the traffic to detect any known worm behavior based on the previous knowledge of the environment. In this paper, we will mention some techniques to avoid Zero day attacks. Then we will analyze the strengths and weakness of both approaches that are honeypot and anomaly based detection. As a result, to integrate both approaches in one hybrid model as enhanced solution of detecting the Zero day attack that may occur in the system.