Paper2023
Material reviewed: AbstractThe authors investigate using ChatGPT to automatically reply to scam emails in order to waste scammers' time and resources through pointless communications. According to the abstract, preliminary results show ChatGPT can decoy scammers.
ApplicationDecoyAdversary engagement
Paper2023
Material reviewed: AbstractThe authors propose a backdoor-resistant fine-tuning procedure for pretrained language models, integrating a 'honeypot' module designed to exclusively absorb backdoor information present in poisoned training samples. By penalizing the information captured by this module during fine-tuning, the authors report a reduction in backdoor attack success rate compared to prior methods.
ApplicationHoneypot
Open software2023
Material reviewed: Repository metadataA Wordpress Honeypot
ApplicationHoneypot
Paper2022
Material reviewed: Public pageThe paper describes a honeypot architecture combining social-network recruitment, decoy websites and warning messages to study prevention of online child exploitation. The authors document educational studies using legal content without hosting child exploitation material.
ApplicationHoneypot
Paper2022
Material reviewed: Full textThe prototype identified 14 of the 20 studied types in the described configuration. The authors note possible false positives and describe types the tool does not cover.
ApplicationIdentityHoneytoken
Paper2022
Material reviewed: AbstractThe paper addresses intrusion detection and cloud security and proposes using honeypots to divert malicious traffic away from systems. The authors describe implementing the honeypot concept in a file-sharing application deployed on a cloud server, aiming to detect attacks and improve security in that environment.
CloudApplicationHoneypot
Paper2022
Material reviewed: Public pageThe paper proposes an intrusion detection framework combining CAPTCHA, honeypots and supervised learning. Honeypots would be integrated into a website to lure malicious software, and the diagram sketches realistic decoy pages and decoy fields.
ApplicationNetworkHoneypotDecoy
Paper2022
Material reviewed: AbstractThis work models attacker-defender engagements as Markov Games to understand human adversarial behaviors and optimize defensive strategy. The authors validate their approach using a Capture-The-Flag (CTF) setup and user studies across varying skill levels. According to the authors, application-level deceptions are an optimal mitigation strategy against targeted attacks, outperforming classic defensive maneuvers, and they present an analysis of attacker behavior when trapped in an embedded honeypot environment.
ApplicationHoneypotAdversary engagement
Paper2021
Material reviewed: AbstractThe authors propose a low-interaction, adaptive and dynamic web application honeypot that imitates vulnerabilities through HTTP events, using the SNARE and TANNER tools to generate the attack surface and analyze/classify incoming requests, as described in the abstract.
ApplicationHoneypot
Open software2021
Material reviewed: Repository metadataRepository about observation of Log4j scans; documentation and maintenance require further review.
ApplicationHoneypot
Paper2021
Material reviewed: AbstractThe authors describe installing a honeypot on a server as an attack detector, with its logs exposed through a REST API built with the Django framework and a MongoDB database, so that an Android application can show whether the server is under attack and block the attacker's IP address. The work is framed around network security and the monitoring of attacks on a resource.
NetworkApplicationHoneypot
Paper2020
Material reviewed: AbstractAccording to the authors, this paper presents an attack that partially breaks a defense that injects 'honeypots' into neural networks to detect adversarial attacks. They report reducing the detection true positive rate to 0% and detection AUC to 0.02 while maintaining original distortion bounds, and note that the original defense authors later amended it to mitigate the attack.
ApplicationHoneypotAdversary engagement
Paper2020
Material reviewed: AbstractAccording to the abstract, the authors propose DARCY, a defense framework adapting the honeypot concept from cybersecurity to detect Universal Trigger textual adversarial attacks. DARCY injects multiple trapdoors into a neural network model to bait and detect such attacks, reporting high detection rates in experiments across four public datasets.
ApplicationHoneypotDecoy
Paper2020
Material reviewed: Publisher metadataBibliographic record on an adaptive deception framework. The abstract and findings still require review.
ApplicationDecoy
Paper2020
Material reviewed: Publisher metadataBibliographic record on personalized web-application deception. The abstract and findings still require review.
ApplicationDecoy
Open software2020
Material reviewed: Repository metadatapython based WordPress honeypot in a docker container
ApplicationHoneypot
Paper2020
Material reviewed: AbstractThe authors describe how they used experiments to evaluate a defense mechanism based on the low interaction honeypot HoneyPy against Slowloris attacks on an Apache web server. According to the deposited abstract, most packets are discarded and directed to the honeypot without the attacker's knowledge, reducing the Slowloris attacks that reach the web server.
NetworkApplicationHoneypot
Paper2019
Material reviewed: AbstractAccording to the authors, this work proposes AnonTokens, an approach applying the honeytoken concept to the data privacy domain to trace re-identification attacks. High re-identification-risk decoy records are inserted into anonymized datasets to detect malicious users. The authors evaluate their approach using large-scale population datasets.
ApplicationHoneytokenDecoy
Paper2019
Material reviewed: AbstractThe authors propose an automatic identification model based on a random forest algorithm with three feature groups—application-layer, network-layer, and other system-layer features—to remotely check whether a server runs a honeypot service. The experiment datasets were collected from public known platforms, and the authors report that the model achieved an AUC value of 0.93.
NetworkApplicationHoneypot
Paper2019
Material reviewed: AbstractAccording to the abstract, this work develops inference techniques to detect organic click fraud in advertising networks. The authors note that malware detection systems, including honeypots, fail to stop click fraud apps, and propose two defenses: a mimicry defence based on detecting click reuse patterns, and a bait-click defence that injects decoy clicks to trigger fraudulent app behavior.
NetworkApplicationHoneypotDecoy
Open software2019
Material reviewed: Repository metadataRepository about Drupal simulation; documentation and maintenance require further review.
ApplicationHoneypot
Open software2019
Material reviewed: Repository metadataRepository about Outlook Web Access simulation; documentation and maintenance require further review.
ApplicationHoneypot
Paper2019
Material reviewed: AbstractAccording to the abstract, the authors conducted the first systematic study of an attack stealing cryptocurrencies via unprotected JSON-RPC endpoints in Ethereum nodes. They designed and deployed a honeypot to capture real-world attacks over six months, collecting millions of requests and analyzing attacker behavior and profits.
NetworkApplicationHoneypot
Paper2018
Material reviewed: AbstractThe authors present 'ProfileGen', a method for automatically generating realistic honeypot profiles for professional social networks, intended to attract malicious actors in online social networks. They report that an evaluation by domain experts confirmed the generated profiles were indistinguishable from real ones.
IdentityApplicationHoneypot