Unwanted traffic characterization on IP networks by low interactive honeypot

Abstract

The increasing amount of unwanted traffic on the Internet consumes the available bandwidth on any network connected to it. Despite efforts to address this issue, it is still a challenge to differentiate unwanted traffic. Due to lack of knowledge or investment, organizations fail to implement security policies, such as BCP 38, which helps blocking the flow of unwanted data. This paper presents a method based on lowinteraction honeypots and network telescopes for identification and classification of unwanted traffic on IP networks. Our method aims to be simple and support low cost of deployment. An evaluation employed traces of real environments to show the method effectiveness. Results offer useful information about unwanted traffic, reaching a private network in a simple manner and with the reduced cost to block it.