Self-adaptive SSH Honeypot Model Capable of Reasoning

The increased number of SSH stolen credentials on the “black market” used for targeted attacks proves the opportunity of SSH Honeypots. Corroborated with recent trends in honeypot research area regarding self-adaptive systems, capable of interacting with attackers on their own, leads us to the necessity of self-adaptive SSH Honeypots. Several Artificial Intelligence techniques have been used in order to achieve “adaptability” such as Reinforcement Learning and Game theory. In this paper we propose a model that uses Case Based Reasoning techniques to enforce the adaptive capabilities of a SSH Honeypot.