A Dynamically Reconfigured Multi-FPGA Network Platform for High-Speed Malware Collection
Malicious software has become a major threat to computer users on the Internet today. Security researchers need to gather and analyze large sample sets to develop effective countermeasures. The setting of honeypots, which emulate vulnerable applications, is one method to collect attack code. The authors have proposed a dedicated hardware architecture for honeypots which allows both high-speed operation at 10Gb/s and beyond and offers a high resilience against attacks on the honeypot infrastructure itself. In this paper, they refine the base NetStage architecture for better management and scalability. Using dynamic partial reconfiguration, they can now update the functionality of the honeypot during operation.