Paper2023
Material reviewed: AbstractThis paper explores using ChatGPT-style conversational agents as a dynamic honeypot interface, imitating Linux, Mac, and Windows terminal commands and tools like TeamViewer, nmap, and ping. The authors present ten feasibility tasks intended for defensive teams to simulate honeypot interfaces with minimal risk, aiming to delay or understand attacker tactics, techniques, and procedures.
NetworkEndpointHoneypot
Paper2023
Material reviewed: AbstractThe work describes the deployment of an ensemble of research honeypot detectors to analyze and evaluate attackers' behavior. The authors present an outline of a containerized cloud honeypot deployment that they state is portable, durable, and simple to deploy and administer, and they describe instrumented monitoring that generated data points from which inferences about malicious users' activities and purpose could be drawn.
CloudNetworkHoneypotDecoy
Paper2023
Material reviewed: Publisher metadataBibliographic record on expert experiences and opinions. The abstract and findings still require review.
NetworkAdversary engagement
Paper2023
Material reviewed: AbstractThe study addresses social engineering attacks, which the authors say exploit human psychology and user awareness, and proposes an automated prevention mechanism that combines honeypots with artificial intelligence and an intrusion prevention system. The stated aim is to detect such attacks, threaten the attacker and restrict his session to keep users away from these manipulation tactics.
NetworkHoneypot
Paper2023
Material reviewed: AbstractThe paper describes implementing a honeypot on Azure Services as a supplement to customary cloud security measures, listing advantages such as prompt attack detection, recognition of attack methods, and safeguarding critical data. The authors outline steps including selecting a virtual machine, installing and configuring honeypot software, deploying monitoring and logging, establishing security groups, running a penetration test, and consistently monitoring the honeypot.
CloudHoneypot
Open software2023
Material reviewed: Repository metadataEthereum honey pot
NetworkHoneypot
Paper2023
Material reviewed: Full textCritical readingProposes a simulation method for evaluating honeypots and moving target defense in networks.
NetworkHoneypotMoving target defense
Paper2023
Material reviewed: AbstractThe authors present a method for selecting cyber deception strategies using a multi-stage Flipit game, aiming to account for defense timing alongside spatial strategy selection. The approach constructs a spatiotemporal decision-making model, introduces a discount factor and transition probabilities, and applies a Proximal Policy Optimization algorithm to compute defender strategies.
NetworkDecoyMoving target defense
Paper2023
Material reviewed: AbstractThe authors propose a signaling game framework between a defender and an insider human agent, using quantum decision theory to exploit cognitive biases and counter insider attacks. The defender deceives the attacker by luring them toward decoy sensors via generators that produce perceptions of classical signals. According to the authors, results show that strategically designed generators can worsen the attacker's ability to identify decoys compared to schemes without generators.
IdentityDecoyAdversary engagement
Paper2023
Material reviewed: Publisher metadataDOI-identified publication on injecting honeytokens using Netfilter; text analysis is pending.
NetworkHoneytoken
Open software2023
Material reviewed: Repository metadataThe plugin repository for Honeycomb, the honeypot framework by Cymmetria
NetworkHoneypot
Paper2023
Material reviewed: AbstractThe authors present HoneyEVSE, a honeypot designed to simulate Electric Vehicle Supply Equipment (EVSE) within the Vehicle-to-Grid paradigm. The system emulates the charging process and login pages with high fidelity to increase attacker engagement. They exposed the honeypot for 30 days on the Internet and report it successfully evaded the Shodan Honeyscore metric while attracting numerous interactions.
IoTOT/ICSHoneypotDecoy
Open software2023
Material reviewed: Repository metadataLLM Based Honeypot File System Creator
NetworkHoneypot
Paper2023
Material reviewed: AbstractThe authors present HoneyIoT, an adaptive high-interaction honeypot for IoT devices that uses a real-device attack trace collection system and reinforcement learning to model and generate convincing responses. According to the paper, differential analysis techniques mutate response values for high fidelity, and after deployment on the public Internet, reported experiments show the system evades pre-attack checks and honeypot detection tools.
IoTHoneypot
Open software2023
Material reviewed: Repository metadataHigh-interaction Honeypot for PLCs and Industrial Control Systems
OT/ICSHoneypot
Paper2023
Material reviewed: AbstractThe authors propose a game-theoretic approach for optimal honeypot allocation in tactical networks with dynamic connectivity. They model a two-player dynamic game accounting for future network state evolution, aiming to maximize the attacker's likelihood of hitting a honeypot while minimizing reconfiguration costs. They present an iterative algorithm to find Nash equilibrium strategies and evaluate its scalability through simulations.
NetworkHoneypotDecoy
Paper2023
Material reviewed: AbstractThis thesis presents a honeypot solution to investigate malicious activity in the heiCLOUD environment, showing according to the author a significant increase in attacks. A new concept is proposed to detect firewall leaks in restricted network zones, along with a method for detecting honeypots at the transport level from an attacker's perspective. A customized OpenSSH server is also presented as an intermediary instance to mitigate such efforts.
CloudNetworkHoneypotAdversary engagement
Paper2023
Material reviewed: AbstractThis report reviews the concepts and types of honeypots, which organizations use as decoy networks to lure attackers, and discusses challenges of deploying them along with advantages and disadvantages.
NetworkHoneypotDecoy
Paper2023
Material reviewed: AbstractThe work addresses honeyword generation: fake passwords that accompany the real password (the "sugarword") in a password-cracking detection system, where a honeychecker distinguishes the real password from the fake ones. The authors describe a honeyword generation method based on a proposed discrete salp swarm algorithm (SSA), a bio-inspired metaheuristic, and present the proposed methodology alongside experimental results compared with previous strategies.
IdentityHoneytokenDecoy
Paper2023
Material reviewed: AbstractThe authors propose a ransomware detection method based on behavior and deception, using decoy files and directories to reveal malicious activity. The paper describes a pilot study with Locky.
Decoy
Paper2023
Material reviewed: AbstractThe paper by Adam Putra and Ade Eviyanti addresses the security of website form inputs against SQL-injection attacks, and describes the honeypot method as a system or computer deliberately used as bait to become a target for attackers. The authors present this method as a way to prevent website security attacks.
ApplicationHoneypot
Paper2023
Material reviewed: AbstractThe authors propose a deep learning based method to generate synthetic IoT device traffic flows mimicking real traffic, aiming to improve IoT honeypots against attacker detection. According to the abstract, the generator outperforms prior approaches in remaining indistinguishable from real traffic.
IoTNetworkHoneypotDecoy
Open software2023
Material reviewed: Repository metadataKippo - SSH Honeypot
NetworkHoneypot
Open software2023
Material reviewed: Repository metadataA medium interaction printer honeypot 🍯
NetworkHoneypot