Journals / Turkish Journal of Mathematics and Computer Science / 2021 / Cilt: 13 - Sayı: 2

Password Attack Analysis Over Honeypot Using Machine Learning Password Attack Analysis

Pages
388–402
DOI
—
🏛️Bibliographic metadata and full text access for this article are provided via DergiPark.
DergiPark Record ↗
✨

AI Summary & Key Takeaways

AI Insight
⚡ TL;DR(Too Long; Didn't Read)

It has been evaluated that the study will make significant contributions to cybersecurity and password attacks.

📌 3 Key Takeaways

🎯
Objective & Hypothesis:Developing information and technology has caused the digitization of data in all areas of our lives.
📊
Key Findings & Data:As a result of this research, it was determined that the password attacks carried out by the attacker were phishing attacks, dictionary attacks, or brute force attacks with high success rates.
💡
Conclusion & Impact:It has been evaluated that the study will make significant contributions to cybersecurity and password attacks.
🔬Design:Modeling & Simulation
📍Scope:Comprehensive Sample
⚙️Variables:Artificial Intelligence · Cyber Security · Honeypot

Abstract

Developing information and technology has caused the digitization of data in all areas of our lives. While this digitization provides entirely new conveniences, speed, efficiency, and effectiveness in our current life, it also created a new environment, space, and ultimately a risk area for attackers. This new space is called cyberspace. There is a constant struggle between security experts and attackers in cyberspace. However, as in any environment, the attacker is always in an advantageous position. In this fight, the newest approach for security experts to catch attackers is to use technologies based on prediction and detection, such as artificial intelligence, machine learning, artificial neural networks. Only in this way will it be possible to fight tens of thousands of pests that appear every second. This study focuses on detecting password attack types (brute force attack, dictionary attack, and social engineering) on real systems using Cowrie Honeypot. The logs obtained during the said attacks were used in the machine learning algorithm, and subsequent similar attacks were classified with the help of artificial intelligence. Various machine learning algorithms such as Naive Bayes, Decision tree, Random Forest, and Support Vector Machine (SVM) have been used to classify these attacks. As a result of this research, it was determined that the password attacks carried out by the attacker were phishing attacks, dictionary attacks, or brute force attacks with high success rates. Determining the type of password attack will play a critical role in determining the measures to be taken by the target institution to close the vulnerabilities in which the attack can be carried out. It has been evaluated that the study will make significant contributions to cybersecurity and password attacks.

🔖

Cite This Article

TAŞÇI, H., GÖNEN, S., BARIŞKAN, M. A., KARACAYILMAZ, G., ALHAN, B., YILMAZ, E. N. (2021). Password Attack Analysis Over Honeypot Using Machine Learning Password Attack Analysis. Turkish Journal of Mathematics and Computer Science, Cilt: 13 - Sayı: 2, 388–402. https://ajindex.com/articles/403460

📄 Full Text PDF Viewer

📄

PDF görüntüleyici hazırlanıyor...

References (16)

  1. Alom, M., Taha, T., Yakopcic, C.,Westberg, S., Sidike, P. et al., A state-of-the-art survey on deep learning theory and architectures, Electronics, 8(3)(2019), 292
  2. Arıkan, S.M., Benzer, R., Bir güvenlik trendi: Bal küpü, Acta Infologica, 2(1)(2018), 1–11
  3. Arunadevi, J., Ramya, S., Raja, M.R., A study of classification algorithms using Rapidminer, International Journal of Pure and Applied Mathematics, 119(12)(2018), 15977–15988
  4. Chou, H.C.H., Lee, C., Yu, H.J., Lai, F.P., Huang, K.H. et al., Password cracking based on learned patterns from disclosed passwords, IJICIC, 9(2)(2013), 821–839
  5. Dowling, S., Schukat, M., Barrett, E., New framework for adaptive and agile honeypots, ETRI Journal, 42(6)(2020), 965–975
  6. El Kamel, N., Eddabbah, M., Lmoumen, Y., Touahni, R., A smart agent design for cyber security based on honeypot and machine learning, Security and Communication Networks, (2020), 1–9
  7. Fan, W., Du, Z., Smith-Creasey, M., Fernandez, D., Honeydoc: an efficient honeypot architecture enabling all-round design, IEEE Journal on Selected Areas in Communications, 37(3)(2019), 683-697
  8. Ibrahim, I., Abdulazeez, A., The role of machine learning algorithms for diagnosing diseases, Journal of Applied Science and Technology Trends, 2(1)(2021), 10–19
  9. Jetty, S., Network Scanning Cookbook: Practical Network Security Using Nmap and Nessus 7. Packt Publishing Ltd, 2018
  10. Jones, J., Wimmer, H., Haddad, R.J., PPTP VPN: An analysis of the effects of a DDoS attack, in 2019 SoutheastCon, (2019), 1–6
  11. Kakarla, T., Mairaj, A., Javaid, A.Y., A real-world password cracking demonstration using open source tools for instructional use, in 2018 IEEE International Conference on Electro/Information Technology (EIT), (2018: IEEE), 0387–0391
  12. Kumar, D.P., Amgoth, T., Annavarapu, C.S.R., Machine learning algorithms for wireless sensor networks: A survey, Information Fusion, 49(2019), 1–25
  13. Li, J.H., Cyber security meets artificial intelligence: a survey, Frontiers of Information Technology & Electronic Engineering, 19(12)(2018), 1462–1474
  14. Li, M., Xu, H., Deng, Y., Evidential decision tree based on belief entropy, Entropy, 21(9)(2019), 897
  15. Manogaran, G., Lopez, D., A survey of big data architectures and machine learning algorithms in healthcare, International Journal of Biomedical Engineering and Technology, 25(2-4)(2017), 182–211
  16. Mohan, N., Predicting Post-Procedural Complications Using Neural Networks on MIMIC-III