Library / sourced records

Resource library

Search by kind, technique, environment or critical-reading notes. Each record states its source and what material was reviewed.

770published resources

Results

28 found
Paper2018

Generation of Automatic and Realistic Artificial Profiles

Material reviewed: Abstract

The authors present 'ProfileGen', a method for automatically generating realistic honeypot profiles for professional social networks, intended to attract malicious actors in online social networks. They report that an evaluation by domain experts confirmed the generated profiles were indistinguishable from real ones.

IdentityApplicationHoneypot
Paper2017

Honeypots for employee information security awareness and education training: A conceptual EASY training model

Material reviewed: Abstract

This paper examines the use of honeypot data for employee information security awareness and education training. According to the authors, two honeypots were deployed at a private university in Singapore and the resulting data were analyzed. Drawing on Routine Activity Theory, they propose a conceptual training model called EASY (Engaging Stakeholders, Acceptable Behavior, Simple Teaching method, Yardstick) for designing security awareness programs.

NetworkIdentityHoneypot
Paper—

Two factor honeytoken authentication (2FHA)

Material reviewed: Abstract

The thesis proposes an authentication framework combining multi-factor authentication with honeytoken-based deception techniques. It describes three successive architectures: static honeytokens to improve detection of compromised credentials, the 2FHA mechanism combining one-time passwords (Google Authenticator) with honeytokens, and a final architecture with session-bound honeytokens, blockchain-supported auditing, and smart contracts on Ethereum.

IdentityApplicationHoneytokenDecoy

Each record shows the source reviewed. Vendor claims and independent results are labeled separately.