CyberdeceptionAtlas · Question → testES

Library / Paper

Paper

Enhancing Honeypot-based Cyber Attribution using Hierarchical Clustering

This paper presents a behavior-driven attacker profiling framework built from empirical data collected in SSH honeypot deployments. The methodology parses complex command chains to identify behavioral patterns, organize them into hierarchical clusters, and map them to the MITRE ATT&CK framework for structured threat interpretation.

HoneypotNetwork

What we know

This paper presents a behavior-driven attacker profiling framework built from empirical data collected in SSH honeypot deployments. The methodology parses complex command chains to identify behavioral patterns, organize them into hierarchical clusters, and map them to the MITRE ATT&CK framework for structured threat interpretation.

Evidence limits

Review based solely on the Crossref deposited abstract; the full text was not read, results were not replicated, and the method's effectiveness was not independently validated.

Reviewed: author abstract. Full-text results were not analyzed.

Sources and provenance

  1. Enhancing Honeypot-based Cyber Attribution using Hierarchical Clustering
    abstract · 2026-10-11

Reviewed: 2026-10-13. This record may change when new evidence is found.

RIS · BibTeX