CyberdeceptionAtlas · Question → testES

Library / Paper

Paper

Characterizing Large-Scale Adversarial Activities Through Large-Scale Honey-Nets

This work presents a longitudinal analysis of attacker behavior using HoneyTrap, an adaptive honeypot framework deployed across geographically distributed nodes to emulate vulnerable services. According to the authors, more than 60.3 million events were collected over a 24-day window, with data transformed into Parquet format for scalable analytics. The authors report that HTTP/HTTPS traffic and SSH brute-force attacks were predominant, alongside activity targeting less common services like Minecraft and SMB.

HoneypotNetworkIoT

What we know

This work presents a longitudinal analysis of attacker behavior using HoneyTrap, an adaptive honeypot framework deployed across geographically distributed nodes to emulate vulnerable services. According to the authors, more than 60.3 million events were collected over a 24-day window, with data transformed into Parquet format for scalable analytics. The authors report that HTTP/HTTPS traffic and SSH brute-force attacks were predominant, alongside activity targeting less common services like Minecraft and SMB.

Evidence limits

This entry is based solely on the publicly available title and abstract; the full text has not been reviewed and the described analysis has not been independently replicated.

Reviewed: author abstract. Full-text results were not analyzed.

Sources and provenance

  1. Characterizing Large-Scale Adversarial Activities Through Large-Scale Honey-Nets
    abstract · 2026-10-04

Reviewed: 2026-10-04. This record may change when new evidence is found.

RIS · BibTeX