Paper2023
Material reviewed: Publisher metadataBibliographic record on deception against autonomous attacks. The abstract and findings still require review.
NetworkDecoy
Open software2023
Material reviewed: Repository metadataRepo for the Open Source version of NOVA
NetworkHoneypot
Paper2023
Material reviewed: AbstractThe authors propose a planning framework to generate a defense strategy that covertly guides an attacker toward a trap state, formulating the problem as an infinite-horizon discounted MDP whose optimal policy serves as the defender's strategy. According to the abstract, this formulation is applicable to systems such as honeypots or honeynets, and the authors report empirically evaluating the merits of their approach.
NetworkHoneypotAdversary engagement
Paper2023
Material reviewed: AbstractThe authors investigate using ChatGPT to automatically reply to scam emails in order to waste scammers' time and resources through pointless communications. According to the abstract, preliminary results show ChatGPT can decoy scammers.
ApplicationDecoyAdversary engagement
Paper2023
Material reviewed: AbstractThe authors propose a backdoor-resistant fine-tuning procedure for pretrained language models, integrating a 'honeypot' module designed to exclusively absorb backdoor information present in poisoned training samples. By penalizing the information captured by this module during fine-tuning, the authors report a reduction in backdoor attack success rate compared to prior methods.
ApplicationHoneypot
Open software2023
Material reviewed: Repository metadataA simple PoC for the use of GPT3.5 in creating an SMTP honeypot
NetworkHoneypot
Paper2023
Material reviewed: AbstractThe authors describe symbSODA, an active cyber deception system that analyzes real-world malware using multipath execution to extract Malicious Sub-graphs composed of WinAPIs and map them to ATT&CK tactics and techniques, in order to construct and execute customized deception playbooks. Its stated purpose is to let users create conflict-free deception plans and automate deception orchestration within a deceptive environment.
EndpointDecoyAdversary engagement
Paper2023
Material reviewed: AbstractThe paper proposes an ethics framework, termed the doctrine of cyber effect, to guide the design of defensive cyber deception. It incorporates five ethical principles (goodwill, deontology, no-harm, transparency, and fairness) and presents the game of ethical duplicity as a reasoning framework applicable to designing defensive cyber deception techniques.
NetworkAdversary engagement
Paper2023
Material reviewed: AbstractThis study, according to its authors, investigates whether honeypots and honeynets described in the literature actually incorporate autonomic computing principles, beyond the use of terms like adaptive or intelligent. The authors analyze the frequency of keywords related to self-configuration, self-healing, self-protection, and self-optimization in a literature sample, finding low presence of the first three and notable presence of the latter.
NetworkHoneypot
Open software2023
Material reviewed: Repository metadataA Wordpress Honeypot
ApplicationHoneypot
Paper2022
Material reviewed: AbstractThis paper describes information acquired from a Secure Shell honeypot, including plaintext login credentials and attack data. The authors present a low-interaction honeypot aimed at organizations with limited resources that records, analyzes and sends notifications about suspicious network traffic, with the stated goal of encouraging the development and adoption of practical honeypot solutions.
NetworkHoneypot
Paper2022
Material reviewed: AbstractThe authors propose a cyber deception defense method based on a signal game, aimed at dealing with network intrusions. The work describes a moving target defense (MTD) enhanced deception mechanism and a signal game model with an equilibrium solution method to guide defense strategy selection, evaluated by the authors through experimental results.
NetworkMoving target defenseDecoy
Paper2022
Material reviewed: Public pageProposes a hybrid framework with two types of honeypots to relieve the flaws of each type and offer the benefits of both, aiming to detect and mitigate DDoS attacks against a webserver.
NetworkHoneypot
Paper2022
Material reviewed: AbstractThe authors propose a game-based collaborative defense approach for UAV networks, using low/medium-interaction honeypots and contract-based incentive mechanisms combined with reinforcement learning to encourage UAVs to share captured attack data.
NetworkIoTHoneypot
Paper2022
Material reviewed: AbstractThe paper proposes a method for generating honeywords using the meerkat clan intelligence algorithm, a metaheuristic swarm intelligence algorithm, aiming to improve the generation process, honeyword properties, and address issues of prior methods. The authors present previous methods, explain the proposed method, and compare experimental results.
IdentityHoneytoken
Paper2022
Material reviewed: AbstractThe paper proposes using the harmony search algorithm (HSA), a music-inspired metaheuristic, to generate honeywords (false passwords that accompany the true password) within a password-cracking detection system. The authors review prior honeyword generation techniques, present their method, and compare experimental results with earlier approaches.
IdentityHoneytoken
Paper2022
Material reviewed: AbstractThis paper explores deploying a honeypot system as a deception mechanism to gather intelligence about attackers. According to the authors, the system can capture information such as the attacker's autonomous system, penetration techniques, attack types, executed commands, and downloaded malware. The authors demonstrate a reproducible experiment using open-source tools to implement such a system.
NetworkHoneypotAdversary engagement
Paper2022
Material reviewed: AbstractThe authors compare the low-interaction honeypot Dionaea and the medium-interaction honeypot Cowrie against port scanning, SSH brute force and DoS. The study aims to assess attack capture, interaction with the attacker, and effects on network metrics and resource usage.
NetworkHoneypot
Paper2022
Material reviewed: AbstractAccording to the authors' abstract, this paper proposes a game-theoretic and reinforcement learning approach to incentivize collaboration among UAVs in low/medium interaction honeypot defense, addressing optimal contract design under partial and complete information asymmetry. The authors state that simulations show improved cooperation and defensive effectiveness compared to conventional schemes.
NetworkIoTHoneypotAdversary engagement
Paper2022
Material reviewed: AbstractThe paper introduces honeypots, their classification by purpose and interaction, and compares open-source tools across various aspects. Its purpose is to help readers protect resources from intruders using freely available network security tools.
NetworkHoneypot
Paper2022
Material reviewed: Full textBibliographic record on controllable fake documents. The abstract and findings still require review.
IdentityHoneytoken
Paper2022
Material reviewed: Public pageThe paper describes a honeypot architecture combining social-network recruitment, decoy websites and warning messages to study prevention of online child exploitation. The authors document educational studies using legal content without hosting child exploitation material.
ApplicationHoneypot
Paper2022
Material reviewed: Full textIn the simulated scenarios, more decoys reduced the attacker agent’s episode win percentage and increased the steps needed to win.
NetworkAdversary engagement
Open software2022
Material reviewed: Repository metadataA tool for deploying and detecting use of Active Directory honeytokens
NetworkHoneytoken