CyberdeceptionAtlas · Question → testES

Library / Paper

Paper

Integration of Low Interaction Honeypot and ELK Stack as Attack Detection Systems on Servers

The work proposes integrating low interaction honeypots with the ELK Stack as a server attack detection system, aiming to divert attacker access and to help administrators analyze the generated logs through visualization. The authors carried out five testing schemes comparing the Cowrie and Dionaea honeypots, and report that Cowrie delivered real-time detection with an average delay time of 3.75 seconds, while ELK provided better monitoring results for administrators through its visualization.

HoneypotNetwork

What we know

The work proposes integrating low interaction honeypots with the ELK Stack as a server attack detection system, aiming to divert attacker access and to help administrators analyze the generated logs through visualization. The authors carried out five testing schemes comparing the Cowrie and Dionaea honeypots, and report that Cowrie delivered real-time detection with an average delay time of 3.75 seconds, while ELK provided better monitoring results for administrators through its visualization.

Evidence limits

Review based only on the member-deposited Crossref abstract; full text was not accessed and results were not independently validated.

Reviewed: author abstract. Full-text results were not analyzed.

Sources and provenance

  1. Integration of Low Interaction Honeypot and ELK Stack as Attack Detection Systems on Servers
    abstract · 2026-10-11

Reviewed: 2026-10-16. This record may change when new evidence is found.

RIS · BibTeX