Multipurpose Network Monitoring Platform Using Dynamic Address Assignment

There have been a number of network monitoring projects launched to cope with cyber threats in the Internet. In those projects, several types of sensors such as black hole sensor, low and high interaction honey pot, and web crawlers are deployed to analyze characteristics of attackers from various perspectives. However, there are some problems of deployment and operation of network monitoring systems, address allocation problem, heavy burden of honey pot operation and address blacklisting problem. To address these problems, this paper proposes a novel multipurpose network monitoring platform that can handle any type of sensors with applying a virtual sensor mechanism and a dynamic address assignment technique. This paper presents the architecture of the platform and provides a preliminary study of the proposed methods with some experiments prior to the development of the system.