CyberdeceptionAtlas · Question → testES

Library / Paper

Paper

An Attack-Driven Incident Response and Defense System (ADIRDS)

The authors present ADIRDS, an online monitoring system that models the real system as a graph and monitors critical assets, deploying realistic honeypots with business context similar to the real system to trap attackers and collect evidence when logs are insufficient. According to the authors, they applied the system to a real case, capturing 38 unique attacker IP addresses.

HoneypotDecoyNetwork

What we know

The authors present ADIRDS, an online monitoring system that models the real system as a graph and monitors critical assets, deploying realistic honeypots with business context similar to the real system to trap attackers and collect evidence when logs are insufficient. According to the authors, they applied the system to a real case, capturing 38 unique attacker IP addresses.

Evidence limits

This entry is based solely on the published title and abstract; the full text was not reviewed and the described experiment has not been replicated.

Reviewed: author abstract. Full-text results were not analyzed.

Sources and provenance

  1. An Attack-Driven Incident Response and Defense System (ADIRDS)
    abstract · 2026-10-04

Reviewed: 2026-10-04. This record may change when new evidence is found.

RIS · BibTeX