CyberdeceptionAtlas · Question → testES

Library / Paper

Paper

DICOMHawk: A Cyber Deception Framework for Medical Imaging Infrastructure

This paper presents DICOMHawk, a cyber-deception framework that emulates DICOM and PACS services with realistic interactions, dynamically populated medical records, and embedded honeytokens, designed to protect medical imaging infrastructure. According to the authors, in a 424-day deployment across multiple networks, DICOMHawk attracted more valid sessions than Dicompot, avoided honeypot detection, and captured 67 medical-related attacks from 15 unique IPs.

HoneypotHoneytokenDecoyNetworkApplication

What we know

This paper presents DICOMHawk, a cyber-deception framework that emulates DICOM and PACS services with realistic interactions, dynamically populated medical records, and embedded honeytokens, designed to protect medical imaging infrastructure. According to the authors, in a 424-day deployment across multiple networks, DICOMHawk attracted more valid sessions than Dicompot, avoided honeypot detection, and captured 67 medical-related attacks from 15 unique IPs.

Evidence limits

This entry is based solely on the publicly available title and abstract; the full text has not been reviewed and the methodology or results have not been independently validated.

Reviewed: author abstract. Full-text results were not analyzed.

Sources and provenance

  1. DICOMHawk: A Cyber Deception Framework for Medical Imaging Infrastructure
    abstract · 2026-10-04

Reviewed: 2026-10-04. This record may change when new evidence is found.

RIS · BibTeX