Paper2022
Material reviewed: AbstractAccording to the authors' abstract, this paper proposes a game-theoretic and reinforcement learning approach to incentivize collaboration among UAVs in low/medium interaction honeypot defense, addressing optimal contract design under partial and complete information asymmetry. The authors state that simulations show improved cooperation and defensive effectiveness compared to conventional schemes.
NetworkIoTHoneypotAdversary engagement
Paper2022
Material reviewed: AbstractThe study aims to secure IoT devices by using a Raspberry Pi as a honeypot to imitate those devices, check user intent, and analyze attack patterns. The authors implemented the Cowrie, Dionaea, and Glastopf honeypots on Raspberry Pi 4B to cover vulnerable protocols and record attacks.
IoTHoneypot
Paper2022
Material reviewed: AbstractThe article proposes EA-POT, an explainable AI-assisted permissioned blockchain framework for predicting potential defaulters' IP addresses, registering those IPs in a blockchain database based on explainable AI suggestions and IP authorizer approval to enhance immutability. The authors carried out experiments in an IoT Cloud research laboratory using three prediction models (Random Forest, Linear Regression, and SVM) and describe a procedure that incorporates interpretable knowledge while blacklisting IPs that reach HoneyPots.
IoTCloudHoneypot
Paper2022
Material reviewed: AbstractThe paper describes a security framework for multi-cloud environments aimed at diverting an attacker and gaining time to analyze and mitigate intrusions. The proposed mechanism consists of modules for managing the multi-cloud platform, an intrusion detection and prevention system, and honeypots, with detection results compared in a two-phase scenario.
CloudNetworkHoneypotDecoy
Paper2022
Material reviewed: AbstractThe authors describe a TaintDroid-based honeypot monitoring system for embedded devices, in which TaintDroid marks attackers who break into the honeypot and their behavior is then monitored and recorded. The work also reports a feasibility test of the system built by the authors.
IoTEndpointHoneypot
Paper2021
Material reviewed: AbstractAccording to the abstract, the authors exposed an SSH service on an internet-connected Raspberry Pi device for over six days to act as a honeypot, logging received login attempts. The study provides an analysis of request origins and intruder focus areas.
IoTNetworkHoneypot
Paper2021
Material reviewed: Publisher metadataBibliographic record on failure analysis in IoT experiments. The abstract and findings still require review.
IoTHoneypot
Paper2021
Material reviewed: AbstractAccording to the authors, HoneyCar is a decision support framework for configuring honeypots in the Internet of Vehicles, based on known vulnerabilities from the NVD/CVE database. The approach models adversarial interaction as a repeated imperfect-information zero-sum game, aiming to compute optimal honeypot configuration strategies for threat intelligence collection.
IoTNetworkHoneypotDecoy
Paper2021
Material reviewed: AbstractThe authors propose HIM, a preventive forensic process model for investigating IoT network incidents that uses honeypots to record attacks over one year. The model aims to cover the entire lifecycle of IoT forensic investigation and address the needs of forensic analysts and the legal community, and the authors report it was validated using various methods.
IoTNetworkHoneypot
Paper2021
Material reviewed: AbstractThe paper proposes and investigates a botnet detection and classification model that combines honeypots with machine learning, aimed at smart factories. The study was carried out in a hardware configuration virtually mimicking a smart factory environment, as described by the authors.
IoTOT/ICSHoneypot
Paper2021
Material reviewed: AbstractThis article aims to introduce honeypots in the context of the Internet of Things (IoT), describe how IoT devices can be exploited by attackers, and investigate honeypot ecosystems for capturing and analyzing information from attacks against these IoT devices. The authors also state that they provide insights into the attack vectors present in most IoT systems, into understanding attack patterns, and into leveraging proactive strategies for IoT security.
IoTHoneypot
Paper2021
Material reviewed: AbstractAccording to the authors, this study deploys honeypots simulating Linux shells to collect heterogeneous threat event data (network traffic, file downloads, SSH logins, and attacker commands) and models attacker behavior using a Temporal Convolutional Network (TCN), comparing it against LSTM and GRU.
NetworkIoTHoneypot
Paper2021
Material reviewed: AbstractThe work addresses the protection of vulnerable components in Internet-of-Things (IoT) networks through an intrusion prevention technique that combines cyberdeception (a decoy system) and moving target defense (network topology shuffling). The authors analytically evaluate effectiveness and efficiency using a graphical security model in an SDN-based IoT network, defining strategies for when and how to perform topology shuffling to pursue goals such as prolonging system lifetime, increasing attack complexity on critical nodes, or maintaining service availability.
IoTNetworkDecoyMoving target defense
Paper2021
Material reviewed: AbstractThe paper proposes an intelligent defense method for mobile-terminal unknown threats based on honeypot technology, as deposited by the authors. The approach aims to induce intruders to attack the honeypot terminal in order to delay attacks on the real target and to monitor, collect and analyze attack behavior.
IoTEndpointHoneypot
Paper2021
Material reviewed: AbstractThe authors present a multi-phased IoT honeypot ecosystem that gradually increases interaction sophistication with adversaries, including a low-interaction camera honeypot. According to the abstract, they applied data analytics to cluster observed attack activity over three years to identify attacker goals and patterns.
IoTHoneypot
Paper2020
Material reviewed: AbstractThis paper describes the authors' initial efforts to build a honeypot ecosystem to gather and analyze real-world attack data against IoT devices. According to the abstract, they develop a multiphased approach that gradually increases the sophistication of low-interaction honeypots, deployed both on-premise and in the cloud, including a specific honeypot for IoT cameras called Honeycamera. The authors report observing attackers explicitly targeting IoT devices, with some activities appearing to involve direct human interaction.
IoTHoneypot
Paper2020
Material reviewed: AbstractThe authors extend the signaling game model into a two-way signaling game that represents the confrontation between defender and attacker, formally define the model, and propose an algorithm for identifying the refined Bayesian equilibrium. Based on calculated benefits, they analyze strategy choice and conduct a simulation to evaluate the model, with the aim of examining the use of deception-based defenses such as honeypots to improve IoT network security.
IoTHoneypot
Paper2020
Material reviewed: AbstractThis paper proposes a framework for preventing ransomware attacks by combining blockchain, honeypot techniques, and cloud and edge computing. The authors state the framework is analyzed mainly on IoT devices, with potential generalization to other malware attacks.
IoTCloudHoneypot
Paper2020
Material reviewed: AbstractThe authors present a long-term investigation of attacks targeting MikroTik routers, using a highly interactive honeypot deployed across six countries. According to the abstract, they collected over 44 million packets over 120 days, classifying traffic by known CVEs to identify activities such as cryptocurrency mining, DNS server redirection, and eavesdropping tunnels.
NetworkIoTHoneypot
Paper2020
Material reviewed: AbstractThe authors propose a method that combines PKI secure authentication and honeypots with the aim of addressing several IoT security problems together, including detecting vulnerabilities and attacks and building attacker profiles. The work frames this in the context of resource-limited IoT devices and large-scale networks, where private-key management is difficult.
IoTHoneypot
Paper2020
Material reviewed: AbstractThe authors propose an integrated defense technique combining cyberdeception via decoy systems with moving target defense through network topology shuffling, applied to SDN-based IoT networks. According to the abstract, they develop and compare several strategies for deciding when and how to reshuffle network topology in the presence of decoys, analytically evaluating effectiveness through a graphical security model. The authors report that their approach prolongs system lifetime, increases attack complexity, and maintains service availability compared to a network without the technique.
IoTNetworkMoving target defenseDecoy
Paper2020
Material reviewed: AbstractThe paper reviews the use of deception technology, specifically honeypot systems, to address threats against IoT devices. The authors compare the most popular existing honeypot systems, identify their strengths and weaknesses, and attempt to adapt them to operate at the level of Internet of things devices.
IoTHoneypotDecoy
Paper2019
Material reviewed: AbstractAccording to the authors, this paper presents a user study with 40 participants evaluating HoneyBot, a hybrid-interaction honeypot designed for networked robotic systems that simulates unsafe actions while performing safe physical ones. The authors report that participants could not distinguish simulated sensor values from real ones.
IoTOT/ICSHoneypotDecoy
Paper2019
Material reviewed: AbstractThe work addresses mapping and classifying bots that form part of IoT botnets and how they propagate across the Internet, a task the authors describe as challenging. According to the deposited abstract, Fooresec aimed to address this issue by footprinting, reporting and remotely securing IoT devices that had previously been turned into bots, relying on honeypots able to 'sense' the Internet in order to map and classify IoT bots according to their behaviours.
IoTHoneypot