Intrusion trap system: an efficient platform for gathering intrusion-related information

Internet trap has been proposed as a notable platform to find out an origin and characteristics of intruders by recording the suspicious activities. We propose an efficient intrusion trap system for protecting a real system. Our proposed system diverts suspicious connections from a real to a trap system by using an intrusion detector even while the TCP connection is ongoing. We also evaluate performance of our system, and results indicate that our proposed system achieves a good performance with little latency when diverting to the trap system. As for a diversion mechanism and achieving high performance, we recognize that intruders hardly notice the existence of our system.