{"id":"https://openalex.org/W4367666256","doi":"https://doi.org/10.1109/access.2023.3271999","title":"Decoy Processes With Optimal Performance Fingerprints","display_name":"Decoy Processes With Optimal Performance Fingerprints","publication_year":2023,"publication_date":"2023-01-01","ids":{"openalex":"https://openalex.org/W4367666256","doi":"https://doi.org/10.1109/access.2023.3271999"},"language":"en","primary_location":{"id":"doi:10.1109/access.2023.3271999","doi":"https://doi.org/10.1109/access.2023.3271999","is_oa":true,"landing_page_url":"https://doi.org/10.1109/access.2023.3271999","pdf_url":"https://ieeexplore.ieee.org/ielx7/6287639/10005208/10113641.pdf","source":{"id":"https://openalex.org/S2485537415","display_name":"IEEE Access","issn_l":"2169-3536","issn":["2169-3536"],"is_oa":true,"is_in_doaj":true,"is_core":true,"listed_in":["anvur-scientific","cwts-core","doaj","jufo-1","ki-jl-1","norway-1","oarl","poland-100","russia-white-list-1","vabb-shw"],"host_organization":"https://openalex.org/P4310319808","host_organization_name":"Institute of Electrical and Electronics Engineers","host_organization_lineage":["https://openalex.org/P4310319808"],"host_organization_lineage_names":["Institute of Electrical and Electronics Engineers"],"type":"journal"},"license":"cc-by-nc-nd","license_id":"https://openalex.org/licenses/cc-by-nc-nd","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"IEEE Access","raw_type":"journal-article"},"volume":null,"type":"article","is_traditional":true,"indexed_in":["crossref","doaj"],"open_access":{"is_oa":true,"oa_status":"gold","oa_url":"https://ieeexplore.ieee.org/ielx7/6287639/10005208/10113641.pdf","any_repository_has_fulltext":true},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5037815124","display_name":"Sara Sutton","orcid":"https://orcid.org/0000-0002-4669-8286","observed_orcids":["https://orcid.org/0000-0002-4669-8286"]},"institutions":[{"id":"https://openalex.org/I8606887","display_name":"Grand Valley State University","ror":"https://ror.org/001m1hv61","country_code":"US","type":"education","lineage":["https://openalex.org/I8606887"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Sara M. Sutton","raw_affiliation_strings":["School of Computing and Information Systems, Grand Valley State University, Allendale, MI, USA"],"raw_orcid":"https://orcid.org/0000-0002-4669-8286","affiliations":[{"raw_affiliation_string":"School of Computing and Information Systems, Grand Valley State University, Allendale, MI, USA","institution_ids":["https://openalex.org/I8606887"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5022002868","display_name":"Julian L. Rrushi","orcid":"https://orcid.org/0000-0002-8874-5554","observed_orcids":["https://orcid.org/0000-0002-8874-5554","https://orcid.org/0000-0003-2291-0665"]},"institutions":[{"id":"https://openalex.org/I177721651","display_name":"Oakland University","ror":"https://ror.org/01ythxj32","country_code":"US","type":"education","lineage":["https://openalex.org/I177721651"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Julian L. Rrushi","raw_affiliation_strings":["Department of Computer Science, Oakland University, Rochester, MI, USA"],"raw_orcid":"https://orcid.org/0000-0003-2291-0665","affiliations":[{"raw_affiliation_string":"Department of Computer Science, Oakland University, Rochester, MI, USA","institution_ids":["https://openalex.org/I177721651"]}]}],"institutions":[],"countries_distinct_count":1,"institutions_distinct_count":2,"corresponding_author_ids":[],"corresponding_institution_ids":[],"apc_list":{"value":1950,"currency":"USD","value_usd":1950},"apc_paid":{"value":1950,"currency":"USD","value_usd":1950},"fwci":0.183,"has_fulltext":true,"cited_by_count":2,"citation_normalized_percentile":{"value":0.44847856,"is_in_top_1_percent":false,"is_in_top_10_percent":false},"cited_by_percentile_year":{"min":93,"max":95},"biblio":{"volume":"11","issue":null,"first_page":"43216","last_page":"43237"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T10400","display_name":"Network Security and Intrusion Detection","score":0.86080002784729,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T10400","display_name":"Network Security and Intrusion Detection","score":0.86080002784729,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11424","display_name":"Security and Verification in Computing","score":0.11760000139474869,"subfield":{"id":"https://openalex.org/subfields/1708","display_name":"Hardware and Architecture"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11241","display_name":"Advanced Malware Detection Techniques","score":0.008500000461935997,"subfield":{"id":"https://openalex.org/subfields/1712","display_name":"Software"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/honeypots","display_name":"honeypots","score":0.972000002861023},{"id":"https://openalex.org/keywords/malware-detection","display_name":"malware detection","score":0.5619999766349792},{"id":"https://openalex.org/keywords/convolutional-neural-networks","display_name":"convolutional neural networks","score":0.8240000009536743},{"id":"https://openalex.org/keywords/opc-server","display_name":"OPC server","score":0.6629999876022339},{"id":"https://openalex.org/keywords/intrusion-detection","display_name":"intrusion detection","score":0.492000013589859}],"concepts":[{"id":"https://openalex.org/C2779179475","wikidata":"https://www.wikidata.org/wiki/Q3545649","display_name":"Decoy","level":3,"score":0.9841625690460205},{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.7208093404769897},{"id":"https://openalex.org/C38652104","wikidata":"https://www.wikidata.org/wiki/Q3510521","display_name":"Computer security","level":1,"score":0.5844221711158752},{"id":"https://openalex.org/C98045186","wikidata":"https://www.wikidata.org/wiki/Q205663","display_name":"Process (computing)","level":2,"score":0.5241249203681946},{"id":"https://openalex.org/C191267431","wikidata":"https://www.wikidata.org/wiki/Q911932","display_name":"Honeypot","level":2,"score":0.4900147020816803},{"id":"https://openalex.org/C2777826928","wikidata":"https://www.wikidata.org/wiki/Q3745713","display_name":"Fingerprint (computing)","level":2,"score":0.4826696217060089},{"id":"https://openalex.org/C541664917","wikidata":"https://www.wikidata.org/wiki/Q14001","display_name":"Malware","level":2,"score":0.4150095283985138},{"id":"https://openalex.org/C41608201","wikidata":"https://www.wikidata.org/wiki/Q980509","display_name":"Embedding","level":2,"score":0.41051626205444336},{"id":"https://openalex.org/C154945302","wikidata":"https://www.wikidata.org/wiki/Q11660","display_name":"Artificial intelligence","level":1,"score":0.36154264211654663},{"id":"https://openalex.org/C111919701","wikidata":"https://www.wikidata.org/wiki/Q9135","display_name":"Operating system","level":1,"score":0.08034563064575195},{"id":"https://openalex.org/C185592680","wikidata":"https://www.wikidata.org/wiki/Q2329","display_name":"Chemistry","level":0,"score":0.0},{"id":"https://openalex.org/C170493617","wikidata":"https://www.wikidata.org/wiki/Q208467","display_name":"Receptor","level":2,"score":0.0},{"id":"https://openalex.org/C55493867","wikidata":"https://www.wikidata.org/wiki/Q7094","display_name":"Biochemistry","level":1,"score":0.0}],"mesh":[],"locations_count":2,"locations":[{"id":"doi:10.1109/access.2023.3271999","doi":"https://doi.org/10.1109/access.2023.3271999","is_oa":true,"landing_page_url":"https://doi.org/10.1109/access.2023.3271999","pdf_url":"https://ieeexplore.ieee.org/ielx7/6287639/10005208/10113641.pdf","source":{"id":"https://openalex.org/S2485537415","display_name":"IEEE Access","issn_l":"2169-3536","issn":["2169-3536"],"is_oa":true,"is_in_doaj":true,"is_core":true,"listed_in":["anvur-scientific","cwts-core","doaj","jufo-1","ki-jl-1","norway-1","oarl","poland-100","russia-white-list-1","vabb-shw"],"host_organization":"https://openalex.org/P4310319808","host_organization_name":"Institute of Electrical and Electronics Engineers","host_organization_lineage":["https://openalex.org/P4310319808"],"host_organization_lineage_names":["Institute of Electrical and Electronics Engineers"],"type":"journal"},"license":"cc-by-nc-nd","license_id":"https://openalex.org/licenses/cc-by-nc-nd","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"IEEE Access","raw_type":"journal-article"},{"id":"pmh:oai:doaj.org/article:8e0023b4a50f4a43856af87553596d6b","doi":null,"is_oa":true,"landing_page_url":"https://doaj.org/article/8e0023b4a50f4a43856af87553596d6b","pdf_url":null,"source":{"id":"https://openalex.org/S4306401280","display_name":"DOAJ (DOAJ: Directory of Open Access Journals)","issn_l":null,"issn":null,"is_oa":false,"is_in_doaj":false,"is_core":false,"listed_in":[],"host_organization":null,"host_organization_name":null,"host_organization_lineage":[],"host_organization_lineage_names":[],"type":"repository"},"license":"cc-by-sa","license_id":"https://openalex.org/licenses/cc-by-sa","version":"submittedVersion","is_accepted":false,"is_published":false,"raw_source_name":"IEEE Access, Vol 11, Pp 43216-43237 (2023)","raw_type":"article"}],"best_oa_location":{"id":"doi:10.1109/access.2023.3271999","doi":"https://doi.org/10.1109/access.2023.3271999","is_oa":true,"landing_page_url":"https://doi.org/10.1109/access.2023.3271999","pdf_url":"https://ieeexplore.ieee.org/ielx7/6287639/10005208/10113641.pdf","source":{"id":"https://openalex.org/S2485537415","display_name":"IEEE Access","issn_l":"2169-3536","issn":["2169-3536"],"is_oa":true,"is_in_doaj":true,"is_core":true,"listed_in":["anvur-scientific","cwts-core","doaj","jufo-1","ki-jl-1","norway-1","oarl","poland-100","russia-white-list-1","vabb-shw"],"host_organization":"https://openalex.org/P4310319808","host_organization_name":"Institute of Electrical and Electronics Engineers","host_organization_lineage":["https://openalex.org/P4310319808"],"host_organization_lineage_names":["Institute of Electrical and Electronics Engineers"],"type":"journal"},"license":"cc-by-nc-nd","license_id":"https://openalex.org/licenses/cc-by-nc-nd","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"IEEE Access","raw_type":"journal-article"},"sustainable_development_goals":[],"study_designs":[],"awards":[{"id":"https://openalex.org/G1873729965","display_name":null,"funder_award_id":"FA7000-18-2-0022","funder_id":"https://openalex.org/F4320337633","funder_display_name":"U.S. Air Force Academy"}],"funders":[{"id":"https://openalex.org/F4320337633","display_name":"U.S. Air Force Academy","ror":"https://ror.org/0055d0g64"}],"has_content":{"grobid_xml":true,"pdf":true},"content_urls":{"pdf":"https://content.openalex.org/works/W4367666256.pdf","grobid_xml":"https://content.openalex.org/works/W4367666256.grobid-xml"},"referenced_works_count":29,"referenced_works":["https://openalex.org/W2440223","https://openalex.org/W78162143","https://openalex.org/W143174683","https://openalex.org/W291356173","https://openalex.org/W1573286687","https://openalex.org/W1965369505","https://openalex.org/W2038464478","https://openalex.org/W2045107949","https://openalex.org/W2050538617","https://openalex.org/W2050547830","https://openalex.org/W2071289869","https://openalex.org/W2089470326","https://openalex.org/W2091167842","https://openalex.org/W2114339651","https://openalex.org/W2115175195","https://openalex.org/W2127218421","https://openalex.org/W2146350924","https://openalex.org/W2158025800","https://openalex.org/W2508465325","https://openalex.org/W2602229646","https://openalex.org/W2765383620","https://openalex.org/W2790719248","https://openalex.org/W2794874179","https://openalex.org/W2892808760","https://openalex.org/W2950774332","https://openalex.org/W2982780612","https://openalex.org/W3007346474","https://openalex.org/W3010360954","https://openalex.org/W4230434954"],"related_works":["https://openalex.org/W2954317528","https://openalex.org/W3010360954","https://openalex.org/W2790719248","https://openalex.org/W1936216256","https://openalex.org/W7155462307","https://openalex.org/W1544783700","https://openalex.org/W7206162987","https://openalex.org/W2761984581","https://openalex.org/W2751249566","https://openalex.org/W4387029698"],"abstract_inverted_index":{"Decoy":[0,173],"targets":[1,27,51,84],"such":[2],"as":[3,72],"honeypots":[4],"and":[5,20,45,108,140,151,204,213,220],"decoy":[6,26,50,67,83,115,133,171,186,205,210],"I/O":[7,187],"are":[8,138],"characterized":[9],"by":[10,88,142],"a":[11,66,97,127,157,166,209],"higher":[12],"accuracy":[13],"in":[14,123,190,225],"detecting":[15],"intrusions":[16],"than":[17],"anomaly,":[18],"misuse,":[19],"specification-based":[21],"detectors.":[22],"Unlike":[23],"these":[24,119],"detectors,":[25],"do":[28,37,52],"not":[29,38,53],"attack":[30],"an":[31],"activity":[32,44,58],"classification":[33],"problem,":[34],"i.e.":[35],"they":[36],"attempt":[39],"to":[40,91,113,164,184,192],"discern":[41],"between":[42,200],"normal":[43],"malicious":[46],"activity.":[47],"By":[48],"design,":[49],"initiate":[54],"system":[55,179],"or":[56],"network":[57],"of":[59,82,99,132,156,178],"their":[60],"own,":[61],"consequently":[62],"any":[63],"operation":[64],"on":[65,121,188],"target":[68],"is":[69,161,182],"unequivocally":[70],"detected":[71],"malicious.":[73],"However,":[74],"we":[75,101,125],"have":[76],"found":[77],"that":[78,106,130,137],"this":[79],"innate":[80],"characteristic":[81],"can":[85],"be":[86],"exploited":[87],"malware-initiated":[89],"probes":[90],"detect":[92,114],"them":[93],"quite":[94],"reliably.":[95],"As":[96],"proof":[98],"concept,":[100],"describe":[102],"red":[103,201],"team":[104,202],"tactics":[105,203],"collect":[107],"analyze":[109],"live":[110],"performance":[111,154,167],"counters":[112],"targets.":[116],"To":[117],"counter":[118],"threats":[120],"machines":[122,189],"production,":[124],"developed":[126],"defensive":[128],"countermeasure":[129],"consists":[131],"processes,":[134],"with":[135,208],"dynamics":[136],"regulated":[139],"guarded":[141],"convolutional":[143],"neural":[144],"networks.":[145],"Our":[146],"deep":[147],"learning":[148],"approach":[149],"characterizes":[150],"builds":[152],"the":[153,176,198,226],"fingerprint":[155],"real":[158],"process,":[159],"which":[160,181],"then":[162],"used":[163],"feed":[165],"profile":[168],"into":[169],"its":[170],"counterpart.":[172],"processes":[174,206],"emulate":[175],"existence":[177],"activity,":[180],"crafted":[183],"enable":[185],"production":[191],"withstand":[193],"malware":[194],"probes.":[195],"We":[196],"evaluated":[197],"interplay":[199],"integrated":[207],"Object":[211],"Linking":[212],"Embedding":[214],"for":[215],"Process":[216],"Control":[217],"(OPC)":[218],"server,":[219],"thus":[221],"discuss":[222],"our":[223],"findings":[224],"paper.":[227]},"counts_by_year":[{"year":2025,"cited_by_count":2}],"updated_date":"2026-11-03T10:50:19.383937","created_date":"2023-05-03T00:00:00"}