Analysis of THUG: a low-interaction client honeypot to identify malicious websites and malwares

• Main Authors: Zulkurnain, Nurul Fariza, Rebitanim, Azli Fitri, Abdul Malik, Noreha
• Format: Conference or Workshop Item
• Language: English; English
• Published: IEEE 2018
• Subjects: TK7885 Computer engineering
• Online Access: http://irep.iium.edu.my/68108/1/68108_Analysis%20of%20THUG.pdf; http://irep.iium.edu.my/68108/7/68108_Analysis%20of%20THUG_scopus.pdf; http://irep.iium.edu.my/68108/; https://ieeexplore.ieee.org/document/8539257

Cybersecurity is becoming more relevant throughout time. As information and technologies expand, so does the potential for it to be exploited. Computer and media have become more widespread in every modern country in the world. Unfortunately, certain community uses this opportunity to exploit the vulnerabilities that these computers left behind. Black hat, which is more identified as hackers and exploiters, uses the networks and servers that are commonly used to gain unauthorized information and data on the innocent victim. This work analyzes several honeypots and makes comparisons between them. Analysis has been done on the results to figure the disadvantages between each honeypot and try to improve one of the honeypots based on programming. The honeypot is deployed to simulate its effectiveness in combating cybercrime by detecting and collecting the information captured on the web browsers.