What we know
The study, attributed to the authors, examines Cowrie Honeypot logs to inform the improvement of Snort rule signatures against brute force attacks. Snort acts as an intrusion prevention system and Cowrie as a tool to investigate anomalous behavior during such attacks; the authors report packet-matching processing times in microseconds for Hydra, Medusa and Ncrack attacks.
Evidence limits
This review is based only on the Crossref-deposited abstract; the full text was not reviewed and the reported results were not independently validated.
Reviewed: author abstract. Full-text results were not analyzed.
Sources and provenance
- The investigation on cowrie honeypot logs in establishing rule signature snort
abstract · 2026-10-11
Reviewed: 2026-10-13. This record may change when new evidence is found.