A valuable resource in the field of cybersecurity, honeypots could be described as reverse phishing tools, referring to servers that are used as decoys, seemingly vulnerable, with the hope that, in the event of their discovery by an attacker, their exploitation can yield important information concerning the methods employed by the hacker and their identity. Seeing as they are built with this purpose, they can be hardened against several attacks to ensure that no valuable data falls into the wrong hands. Their value can also be in finding unknown vulnerabilities for new technologies by analyzing the attacker’s patterns. Developed by Google, QUIC is a novel protocol that lays on top of UDP, employing TLS to encrypt data, and is the base for HTTP/3, a new, improved version of one of the most widely used protocols on the internet. Therefore, in this paper, we propose QUICPot, a novel Honeypot solution for QUIC protocol. We design and implement a honeypot server that implements QUIC protocol for vulnerability identification and evaluate the performance of the proposed solution using Pytest.

错误:搜索内容不能为空,请输入英文关键词
错误:关键词超出字数限制,请精简
高级检索

QUICPot. A HTTP/3 Protocol Honeypot

  • Maria Teodor,
  • Bogdan-Costel Mocanu,
  • Cătălin Negru,
  • Florin Pop

摘要

A valuable resource in the field of cybersecurity, honeypots could be described as reverse phishing tools, referring to servers that are used as decoys, seemingly vulnerable, with the hope that, in the event of their discovery by an attacker, their exploitation can yield important information concerning the methods employed by the hacker and their identity. Seeing as they are built with this purpose, they can be hardened against several attacks to ensure that no valuable data falls into the wrong hands. Their value can also be in finding unknown vulnerabilities for new technologies by analyzing the attacker’s patterns. Developed by Google, QUIC is a novel protocol that lays on top of UDP, employing TLS to encrypt data, and is the base for HTTP/3, a new, improved version of one of the most widely used protocols on the internet. Therefore, in this paper, we propose QUICPot, a novel Honeypot solution for QUIC protocol. We design and implement a honeypot server that implements QUIC protocol for vulnerability identification and evaluate the performance of the proposed solution using Pytest.