Despliegue de un honeynet basado en redes definidas por software para un ISP

Abstract

Currently the Internet has become a basic service in Ecuadorian homes and its use is growing exponentially, for this reason Internet service providers or ISPs are concerned about solving the presence of data traffic within their infrastructure, the root of this problem, is that companies have been obliged to increase the capacity in the channel dedicated to their customers at a lower cost in order to monopolize the market, without imagining that the increase in subscribers implies an increase in width band within your own network. To avoid congestion in the company's conventional network, it is proposed to use the OpenFlow protocol, on Mikrotik brand devices, the software defined network (SDN) is executed, with HPE VAN SDN as orchestrator of the new Network topology. The tests performed are shown, both for data response speed and bandwidth performance results. By having a new technology in the data network, it is proposed to improve perimeter trust with honeypots, applying and configuring several honeypots to create a honeynet (union of honeypots). With software distributions such as Honeydrive and T-Pot, all the tools embedded in each one was described, showing as a result of the investigation the respective security tests and the importance of having a Trap system within an ISP.