Penetration Detection and Incident Response Toolkit

Abstract

Most of the network attacks are carried out through compromised hosts. Intruders get hold of different vulnerable hosts and launch attacks, which can lead to disastrous loss to organizations and networks. Moreover, emergences of sophisticated attack techniques by perpetrators leave a host infected and make it extremely difficult to trace back to them. Reflectors and botnets have become very common and easy now days because they don’t get any resistance while penetrating a host’s security, and targeting another network or host through these compromised hosts or slaves. Therefore, in any network, taking care of a host’s security is as critical as it is to put an intrusion detection system on gateway routers. In this project, we aim to provide a host penetration detection system. Main purpose is to protect a host from being a part of a network attack, e.g. DDoS attack, and make it secure from intrusions to take place in its configuration and internal-system.