Creation of a High-Interaction Honeypot System based-on Docker containers

Abstract

This article proposes the creation of a high interaction honeypot based on Docker for the detection of attacks at both network-level and host-level. Open source tools have been used to make it scalable, dynamic and secure for its implementation. It has been tested in a real environment showing its effectiveness in capturing malicious data for subsequent analysis at network-level and host-level and using tools such as VirusTotal.