Paper

Apate - A Linux Kernel Module for High Interaction Honeypots

This paper presents Apate, a Linux Kernel Module that logs, blocks, and manipulates system calls based on configurable conditions such as PID or UID. According to the authors, Apate serves as a building block to harden high-interaction honeypots and extend attacker interaction without introducing new vulnerabilities.

HoneypotEndpoint

What we know

This paper presents Apate, a Linux Kernel Module that logs, blocks, and manipulates system calls based on configurable conditions such as PID or UID. According to the authors, Apate serves as a building block to harden high-interaction honeypots and extend attacker interaction without introducing new vulnerabilities.

Evidence limits

This entry is based solely on the official arXiv title and abstract; the full text has not been reviewed and the effectiveness of the described module has not been independently validated.

Reviewed: author abstract. Full-text results were not analyzed.

Sources and provenance

  1. Apate - A Linux Kernel Module for High Interaction Honeypots
    abstract · 2026-10-04

Reviewed: 2026-10-04. This record may change when new evidence is found.

RIS · BibTeX