The Role of Rootkit s Techniques in High Interaction Honeypots

In High Interaction (HI) honeypots, hiding process typically refers to the ability to hide data capturing of intruder activities that Penetrated into the honeypot successfully. Today, this has become a major challenge in the field of honeypot research. In fact, a successful honeypot must be able to hide itself from intruder. A common tactic for hiding honeypot s data capture tool is the use of rootkit s techniques. In this report, first, we review a definition of honeypots. Second, we describe the important challenges of HI honeypot. Third, we address the role of Rootkit s techniques as a solution for these important issues that deal with honeypot. We also discuss the definition and major features of rootkit s techniques.