Mimicry Honeypot: A Brief Introduction

The paper firstly analyzes the limitation of traditional defense methods, including the firewall and the IDS. Then the paper discusses the traditional honeypot system in detail. Unfortunately, the traditional honeypot is a passive active defense mechanism in nature, and could be unfavorable for cyber defense. Inspired by the mimetic phenomenon of the nature, we introduce the mimicry concept into the network defense, define the concept of protective coloration and warning coloration for cyber defense, and then formalize a mimicry honeypot model, which could perceive and adaptive the change of the network service and perform better camouflage. Several important issues are discussed in this paper. So far as we know, this is the first paper about the mimicry honeypot.