Honeynet based Defensive mechanism Against DDoS Attacks.

Internet we are using today is expanding faster than we could have imagined. Since the dawn of the Internet, there has been an exponential increase in the number of web sites and so the quantity of data on these websites. The hackers attack the web sites to collect useful information and also to make other legitimate users devoid of the information or services they required. Such problems and other similar types of attacks can be handled by "Honeypot" system which takes all attacks on itself and studies the attack patterns to detect similar kind of attacks in future. Honeypots allow all the attacks on itself and make attackers think that they have the access of real system and meanwhile honeypots will study all the attack pattern of attackers. The authors have created a network of various Honeypots to enhance the efficiency. Before honeypots, a filtering algorithm is used which with the help of pre-defined sink server will predict whether a given packet is malicious or not, here help of ISP service provider can also be taken if sink server doesn't have any information about the sender of given data packets. Then to further enhance the capability of honeynet cloud, a various different type of services can be deployed at honeynet clouds like HTTP, CBR and FTP. Here, the authors have used NS2 simulator to run the proposed work and the results are taken in the form of graphs like throughput of all three different types of honeypots, bandwidth and packet loss of all services provided by destination servers. Detection rate of malicious packets are calculated and comparison has be done between different services provided by honeynet cloud. [ABSTRACT FROM AUTHOR]