Evaluation and Comparison of the Use of Reinforcement Learning Algorithms on SSH Honeypot

Kristyanto, Marco Ariano and Louk, Maya Hilda Lestari (2024) Evaluation and Comparison of the Use of Reinforcement Learning Algorithms on SSH Honeypot. Teknika, 13 (1). pp. 77-85. ISSN 2549-8037, EISSN 2549-8045

PDF (cyber security, honeypot) 763-Article Text-4061-1-10-20240206 (1).pdf - Published Version Download (386kB)

Abstract

A honeypot is a tool or system used to record, redirect, and even lure hackers into penetrating and exploiting a system. The increasing development of technology causes cyber hackers to realize the existence of honeypots using various other software and tools. So, honeypots need a way to learn how hackers behave. The idea proposed is to combine honeypots with reinforcement learning algorithms so that honeypots become adaptive honeypots. This study suggests the concept by comparing the two Q learning-based RL algorithms, namely DQN and DDQN, to reach which algorithm is more optimal. The study results showed that the DDQN algorithm is more optimal in determining actions when compared to the DQN algorithm because using a double Q-value can help determine the action more accurately. Based on the result, the DDQN algorithm consumed less memory than the DQN Honeypot. The learning rate curve and the processing of DDQN algorithm commands can be used as an alternative algorithm that can be combined with honeypots because of the learning rate, which can make honeypots faster in the dynamic environment.

Item Type:	Article
Uncontrolled Keywords:	Honeypot, Reinforcement Learning, DDQN, DQN, Adaptive Honeypot
Subjects:	T Technology > T Technology (General)
Divisions:	Faculty of Engineering > Department of Information Technology
Depositing User:	MARCO ARIANO KRISTYANTO
Date Deposited:	27 Mar 2024 08:15
Last Modified:	27 Mar 2024 08:15
URI:	http://repository.ubaya.ac.id/id/eprint/46182

Actions (login required)

View Item