Modeling the obfuscation method of network equipment identificators for hiding the unmasking features of proactive information protection services
The article is dedicated to prevention of infocommunication network attacks. In addition to traditional information protection services (IPS) based on detection and prohibition policies, such as firewalls, passive and proactive IPS are widely used, which allow preventing harmful effects of network attacks at the initial stage of them - reconnaissance of network structure. Using such tools makes it possible to impose false information about real structure and typology of the computer network, thus prevening network attacks on the preliminary phase of information gathering. However, the implementation features of such IPS can lead to their compromising and decreasing the overall security level. One of these features was researched, that was inherent either for passive or proactive protection tools, which can be a reason for them to be compromised. The algorithm for network «tarpits» was developed, that leads to reducing the possibility for these IPS to be detected. It is based on hiding researched demasking feature, lowering its informativity.