NAS Honeypot Technology Based on Attack Chain

Abstract

With the wide application of network attached storage (NAS), the security problem is becoming more and more serious, together with the increasingly fierce attacks against NAS devices of different manufacturers. In order to better capture various types of attacks against NAS devices and detect security threats in time, this paper proposes a solution named NAS honeypot, mining the potential security threats through modeling and analyzing the NAS threats. Then a NAS honeypot based on device virtualization technology and depth monitoring and attack induction was designed on the basis of the construction NAS attack chain. Experimental results show that the NAS honeypot can effectively capture, record and analyze network attacks against multi-types NAS devices with a strong guiding effect in mastering popular attack method of NAS devices and alleviating the security threats of NAS.