Observing Distributed Reflection Denial-of-Service Attacks by Several Kinds of Honeypots

In recent years, Distributed Reflection Denial-of-Service (DRDoS) attacks such as DNS Reflection attack have become a serious issue. DRDoS attacks abuse various types of services as reflectors, so it is important to observe the attack with multiple kinds of services to grasp the trend of attacks. In this paper, we propose a method to observe DRDoS attacks with several kinds of honeypots which emulate different types of network services.