COR-Honeypot: Copy-On-Risk, Virtual Machine as Honeypot in the Cloud

This paper proposes Copy-On-Risk (COR) honeypot solution and implementation. Our prototype COR-Honeypot defends against attacks by creating on demand a personalized honeypot by cloning the victim and isolating the attack to the newly created honeypot. We measure the effectiveness of COR-Honeypot on resource usage and similarity of personalized honeypot to the victim. Results over different configurations of COR-Honeypot have demonstrated the benefits of the proposed solution.