CASSHH - Case Adaptive SSH Honeypot

Abstract

This paper presents a novel honeypot system implemented as a deliberative agent, built by means of a Case Based Reasoning (CBR) system. The honeypot system uses as reference an existing medium interaction honeypot (Kippo) and leverages the Beliefs-Desires-Intentions (BDI) deliberative agents improved with the learning capabilities of Case Base Reasoning (CBR) technique. The main goal is to create an autonomous system capable to learn and adapt by interaction with the attackers. The preliminary experimental results show that the developed system reacts as it was foreseen. © Springer-Verlag Berlin Heidelberg 2014.