{"id":"https://openalex.org/W4392560906","doi":"https://doi.org/10.1145/3651991","title":"ADAPT: Adaptive Camouflage Based Deception Orchestration For Trapping Advanced Persistent Threats","display_name":"ADAPT: Adaptive Camouflage Based Deception Orchestration For Trapping Advanced Persistent Threats","publication_year":2024,"publication_date":"2024-03-07","ids":{"openalex":"https://openalex.org/W4392560906","doi":"https://doi.org/10.1145/3651991"},"language":"en","primary_location":{"id":"doi:10.1145/3651991","doi":"https://doi.org/10.1145/3651991","is_oa":true,"landing_page_url":"https://doi.org/10.1145/3651991","pdf_url":"https://dl.acm.org/doi/pdf/10.1145/3651991","source":{"id":"https://openalex.org/S4210235901","display_name":"Digital Threats Research and Practice","issn_l":"2576-5337","issn":["2576-5337","2692-1626"],"is_oa":true,"is_in_doaj":false,"is_core":true,"listed_in":["cwts-core","dongbi-c","norway-1","poland-20","russia-white-list-2"],"host_organization":"https://openalex.org/P4310319798","host_organization_name":"Association for Computing Machinery","host_organization_lineage":["https://openalex.org/P4310319798"],"host_organization_lineage_names":["Association for Computing Machinery"],"type":"journal"},"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Digital Threats: Research and Practice","raw_type":"journal-article"},"volume":null,"type":"article","is_traditional":true,"indexed_in":["crossref"],"open_access":{"is_oa":true,"oa_status":"diamond","oa_url":"https://dl.acm.org/doi/pdf/10.1145/3651991","any_repository_has_fulltext":false},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5068986465","display_name":"Venkata Sai Charan Putrevu","orcid":"https://orcid.org/0000-0003-4535-8690","observed_orcids":["https://orcid.org/0000-0003-4535-8690"]},"institutions":[{"id":"https://openalex.org/I94234084","display_name":"Indian Institute of Technology Kanpur","ror":"https://ror.org/05pjsgx75","country_code":"IN","type":"education","lineage":["https://openalex.org/I94234084"]}],"countries":["IN"],"is_corresponding":false,"raw_author_name":"Venkata Sai Charan Putrevu","raw_affiliation_strings":["Department of Computer Science and Engineering, Indian Institute of Technology Kanpur, Kanpur, India"],"raw_orcid":"https://orcid.org/0000-0003-3495-8332","affiliations":[{"raw_affiliation_string":"Department of Computer Science and Engineering, Indian Institute of Technology Kanpur, Kanpur, India","institution_ids":["https://openalex.org/I94234084"]}]},{"author_position":"middle","author":{"id":null,"display_name":"Subhasis Mukhopadhyay","orcid":"https://orcid.org/0000-0002-5823-7882","observed_orcids":["https://orcid.org/0000-0002-5823-7882"]},"institutions":[{"id":"https://openalex.org/I94234084","display_name":"Indian Institute of Technology Kanpur","ror":"https://ror.org/05pjsgx75","country_code":"IN","type":"education","lineage":["https://openalex.org/I94234084"]}],"countries":["IN"],"is_corresponding":false,"raw_author_name":"Subhasis Mukhopadhyay","raw_affiliation_strings":["Department of Computer Science and Engineering, Indian Institute of Technology Kanpur, Kanpur, India"],"raw_orcid":"https://orcid.org/0000-0002-5823-7882","affiliations":[{"raw_affiliation_string":"Department of Computer Science and Engineering, Indian Institute of Technology Kanpur, Kanpur, India","institution_ids":["https://openalex.org/I94234084"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5035112650","display_name":"Subhajit Manna","orcid":"https://orcid.org/0009-0000-6472-1884","observed_orcids":["https://orcid.org/0009-0000-6472-1884","https://orcid.org/0009-0008-4138-5804"]},"institutions":[{"id":"https://openalex.org/I94234084","display_name":"Indian Institute of Technology Kanpur","ror":"https://ror.org/05pjsgx75","country_code":"IN","type":"education","lineage":["https://openalex.org/I94234084"]}],"countries":["IN"],"is_corresponding":false,"raw_author_name":"Subhajit Manna","raw_affiliation_strings":["Department of Computer Science and Engineering, Indian Institute of Technology Kanpur, Kanpur, India"],"raw_orcid":"https://orcid.org/0009-0008-4138-5804","affiliations":[{"raw_affiliation_string":"Department of Computer Science and Engineering, Indian Institute of Technology Kanpur, Kanpur, India","institution_ids":["https://openalex.org/I94234084"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5001530440","display_name":"Nanda Rani","orcid":"https://orcid.org/0000-0003-1255-5284","observed_orcids":["https://orcid.org/0000-0003-1255-5284"]},"institutions":[{"id":"https://openalex.org/I94234084","display_name":"Indian Institute of Technology Kanpur","ror":"https://ror.org/05pjsgx75","country_code":"IN","type":"education","lineage":["https://openalex.org/I94234084"]}],"countries":["IN"],"is_corresponding":false,"raw_author_name":"Nanda Rani","raw_affiliation_strings":["Department of Computer Science and Engineering, Indian Institute of Technology Kanpur, Kanpur, India"],"raw_orcid":"https://orcid.org/0000-0003-1255-5284","affiliations":[{"raw_affiliation_string":"Department of Computer Science and Engineering, Indian Institute of Technology Kanpur, Kanpur, India","institution_ids":["https://openalex.org/I94234084"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5094091829","display_name":"Ansh Vaid","orcid":"https://orcid.org/0009-0009-6663-3728","observed_orcids":["https://orcid.org/0009-0009-6663-3728"]},"institutions":[{"id":"https://openalex.org/I94234084","display_name":"Indian Institute of Technology Kanpur","ror":"https://ror.org/05pjsgx75","country_code":"IN","type":"education","lineage":["https://openalex.org/I94234084"]}],"countries":["IN"],"is_corresponding":false,"raw_author_name":"Ansh Vaid","raw_affiliation_strings":["Department of Computer Science and Engineering, Indian Institute of Technology Kanpur, Kanpur, India"],"raw_orcid":"https://orcid.org/0009-0009-6663-3728","affiliations":[{"raw_affiliation_string":"Department of Computer Science and Engineering, Indian Institute of Technology Kanpur, Kanpur, India","institution_ids":["https://openalex.org/I94234084"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5074661873","display_name":"Hrushikesh Chunduri","orcid":"https://orcid.org/0000-0002-1413-657X","observed_orcids":["https://orcid.org/0000-0002-1413-657X"]},"institutions":[{"id":"https://openalex.org/I94234084","display_name":"Indian Institute of Technology Kanpur","ror":"https://ror.org/05pjsgx75","country_code":"IN","type":"education","lineage":["https://openalex.org/I94234084"]}],"countries":["IN"],"is_corresponding":false,"raw_author_name":"Hrushikesh Chunduri","raw_affiliation_strings":["Department of Computer Science and Engineering, Indian Institute of Technology Kanpur, Kanpur, India"],"raw_orcid":"https://orcid.org/0000-0002-1413-657X","affiliations":[{"raw_affiliation_string":"Department of Computer Science and Engineering, Indian Institute of Technology Kanpur, Kanpur, India","institution_ids":["https://openalex.org/I94234084"]}]},{"author_position":"middle","author":{"id":null,"display_name":"Mohan Anand Putrevu","orcid":"https://orcid.org/0000-0002-9523-017X","observed_orcids":["https://orcid.org/0000-0002-9523-017X"]},"institutions":[{"id":"https://openalex.org/I94234084","display_name":"Indian Institute of Technology Kanpur","ror":"https://ror.org/05pjsgx75","country_code":"IN","type":"education","lineage":["https://openalex.org/I94234084"]}],"countries":["IN"],"is_corresponding":false,"raw_author_name":"Mohan Anand Putrevu","raw_affiliation_strings":["Department of Computer Science and Engineering, Indian Institute of Technology Kanpur, Kanpur, India"],"raw_orcid":"https://orcid.org/0000-0002-9523-017X","affiliations":[{"raw_affiliation_string":"Department of Computer Science and Engineering, Indian Institute of Technology Kanpur, Kanpur, India","institution_ids":["https://openalex.org/I94234084"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5021517996","display_name":"Sandeep K. Shukla","orcid":"https://orcid.org/0000-0001-5525-7426","observed_orcids":["https://orcid.org/0000-0001-5525-7426"]},"institutions":[{"id":"https://openalex.org/I94234084","display_name":"Indian Institute of Technology Kanpur","ror":"https://ror.org/05pjsgx75","country_code":"IN","type":"education","lineage":["https://openalex.org/I94234084"]}],"countries":["IN"],"is_corresponding":false,"raw_author_name":"Sandeep Shukla","raw_affiliation_strings":["Department of Computer Science and Engineering, Indian Institute of Technology Kanpur, Kanpur, India"],"raw_orcid":"https://orcid.org/0000-0001-5525-7426","affiliations":[{"raw_affiliation_string":"Department of Computer Science and Engineering, Indian Institute of Technology Kanpur, Kanpur, India","institution_ids":["https://openalex.org/I94234084"]}]}],"institutions":[],"countries_distinct_count":1,"institutions_distinct_count":1,"corresponding_author_ids":[],"corresponding_institution_ids":["https://openalex.org/I94234084"],"apc_list":null,"apc_paid":null,"fwci":2.1098,"has_fulltext":true,"cited_by_count":16,"citation_normalized_percentile":{"value":0.86760968,"is_in_top_1_percent":false,"is_in_top_10_percent":false},"cited_by_percentile_year":{"min":93,"max":99},"biblio":{"volume":"5","issue":"3","first_page":"1","last_page":"35"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T10400","display_name":"Network Security and Intrusion Detection","score":0.9082000255584717,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T10400","display_name":"Network Security and Intrusion Detection","score":0.9082000255584717,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T10734","display_name":"Information and Cyber Security","score":0.015399999916553497,"subfield":{"id":"https://openalex.org/subfields/1710","display_name":"Information Systems"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11644","display_name":"Spam and Phishing Detection","score":0.014499999582767487,"subfield":{"id":"https://openalex.org/subfields/1710","display_name":"Information Systems"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/honeypots","display_name":"honeypots","score":0.925000011920929},{"id":"https://openalex.org/keywords/advanced-persistent-threats","display_name":"advanced persistent threats","score":0.8999999761581421},{"id":"https://openalex.org/keywords/adaptive-camouflage","display_name":"adaptive camouflage","score":0.8080000281333923},{"id":"https://openalex.org/keywords/deception-technology","display_name":"deception technology","score":0.7210000157356262},{"id":"https://openalex.org/keywords/cyber-kill-chain","display_name":"cyber kill chain","score":0.8169999718666077},{"id":"https://openalex.org/keywords/threat-intelligence","display_name":"threat intelligence","score":0.5590000152587891}],"concepts":[{"id":"https://openalex.org/C2776196576","wikidata":"https://www.wikidata.org/wiki/Q196113","display_name":"Camouflage","level":2,"score":0.9558706283569336},{"id":"https://openalex.org/C199168358","wikidata":"https://www.wikidata.org/wiki/Q3367000","display_name":"Orchestration","level":3,"score":0.9452785849571228},{"id":"https://openalex.org/C2779267917","wikidata":"https://www.wikidata.org/wiki/Q170028","display_name":"Deception","level":2,"score":0.8078817129135132},{"id":"https://openalex.org/C2777924906","wikidata":"https://www.wikidata.org/wiki/Q34168","display_name":"Trapping","level":2,"score":0.5872014760971069},{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.49265581369400024},{"id":"https://openalex.org/C38652104","wikidata":"https://www.wikidata.org/wiki/Q3510521","display_name":"Computer security","level":1,"score":0.40355539321899414},{"id":"https://openalex.org/C15744967","wikidata":"https://www.wikidata.org/wiki/Q9418","display_name":"Psychology","level":0,"score":0.34714797139167786},{"id":"https://openalex.org/C86803240","wikidata":"https://www.wikidata.org/wiki/Q420","display_name":"Biology","level":0,"score":0.17179414629936218},{"id":"https://openalex.org/C77805123","wikidata":"https://www.wikidata.org/wiki/Q161272","display_name":"Social psychology","level":1,"score":0.17145508527755737},{"id":"https://openalex.org/C154945302","wikidata":"https://www.wikidata.org/wiki/Q11660","display_name":"Artificial intelligence","level":1,"score":0.16853532195091248},{"id":"https://openalex.org/C142362112","wikidata":"https://www.wikidata.org/wiki/Q735","display_name":"Art","level":0,"score":0.132974773645401},{"id":"https://openalex.org/C18903297","wikidata":"https://www.wikidata.org/wiki/Q7150","display_name":"Ecology","level":1,"score":0.1272752285003662},{"id":"https://openalex.org/C153349607","wikidata":"https://www.wikidata.org/wiki/Q36649","display_name":"Visual arts","level":1,"score":0.06767898797988892},{"id":"https://openalex.org/C558565934","wikidata":"https://www.wikidata.org/wiki/Q2743","display_name":"Musical","level":2,"score":0.06292650103569031}],"mesh":[],"locations_count":1,"locations":[{"id":"doi:10.1145/3651991","doi":"https://doi.org/10.1145/3651991","is_oa":true,"landing_page_url":"https://doi.org/10.1145/3651991","pdf_url":"https://dl.acm.org/doi/pdf/10.1145/3651991","source":{"id":"https://openalex.org/S4210235901","display_name":"Digital Threats Research and Practice","issn_l":"2576-5337","issn":["2576-5337","2692-1626"],"is_oa":true,"is_in_doaj":false,"is_core":true,"listed_in":["cwts-core","dongbi-c","norway-1","poland-20","russia-white-list-2"],"host_organization":"https://openalex.org/P4310319798","host_organization_name":"Association for Computing Machinery","host_organization_lineage":["https://openalex.org/P4310319798"],"host_organization_lineage_names":["Association for Computing Machinery"],"type":"journal"},"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Digital Threats: Research and Practice","raw_type":"journal-article"}],"best_oa_location":{"id":"doi:10.1145/3651991","doi":"https://doi.org/10.1145/3651991","is_oa":true,"landing_page_url":"https://doi.org/10.1145/3651991","pdf_url":"https://dl.acm.org/doi/pdf/10.1145/3651991","source":{"id":"https://openalex.org/S4210235901","display_name":"Digital Threats Research and Practice","issn_l":"2576-5337","issn":["2576-5337","2692-1626"],"is_oa":true,"is_in_doaj":false,"is_core":true,"listed_in":["cwts-core","dongbi-c","norway-1","poland-20","russia-white-list-2"],"host_organization":"https://openalex.org/P4310319798","host_organization_name":"Association for Computing Machinery","host_organization_lineage":["https://openalex.org/P4310319798"],"host_organization_lineage_names":["Association for Computing Machinery"],"type":"journal"},"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Digital Threats: Research and Practice","raw_type":"journal-article"},"sustainable_development_goals":[],"study_designs":[],"awards":[],"funders":[{"id":"https://openalex.org/F4320320712","display_name":"Indian Institute of Technology Kanpur","ror":"https://ror.org/05pjsgx75"}],"has_content":{"pdf":true,"grobid_xml":true},"content_urls":{"pdf":"https://content.openalex.org/works/W4392560906.pdf","grobid_xml":"https://content.openalex.org/works/W4392560906.grobid-xml"},"referenced_works_count":17,"referenced_works":["https://openalex.org/W2029648915","https://openalex.org/W2084343397","https://openalex.org/W2735065902","https://openalex.org/W2799617112","https://openalex.org/W2910711617","https://openalex.org/W2976920196","https://openalex.org/W3152342827","https://openalex.org/W3162706835","https://openalex.org/W3187251708","https://openalex.org/W4311165999","https://openalex.org/W4378530982","https://openalex.org/W4379744444","https://openalex.org/W4383981974","https://openalex.org/W4387298133","https://openalex.org/W4396876367","https://openalex.org/W4399574931","https://openalex.org/W6999626536"],"related_works":["https://openalex.org/W7116300610","https://openalex.org/W2084343397","https://openalex.org/W4403977935","https://openalex.org/W4410064269","https://openalex.org/W4411366585","https://openalex.org/W7139592576","https://openalex.org/W4407106963","https://openalex.org/W7130657470","https://openalex.org/W7123281937","https://openalex.org/W7085481383"],"abstract_inverted_index":{"Honeypots":[0],"serve":[1],"as":[2],"a":[3,75,89,118,122,133],"valuable":[4],"deception":[5],"technology,":[6],"enabling":[7,143],"security":[8,22],"teams":[9],"to":[10,39,54,179],"gain":[11],"insights":[12],"into":[13],"the":[14,52,70,127,192],"behaviour":[15],"patterns":[16],"of":[17,45,74,169,194],"attackers":[18,57],"and":[19,43,63,72,108,171,190],"investigate":[20],"cyber":[21,112],"breaches.":[23],"However,":[24],"traditional":[25],"honeypots":[26],"prove":[27],"ineffective":[28],"against":[29],"advanced":[30],"adversaries":[31],"like":[32],"Advanced":[33],"Persistent":[34],"Threats":[35],"(APT)":[36],"groups":[37],"due":[38],"their":[40,105],"evasion":[41],"tactics":[42],"awareness":[44],"typical":[46],"honeypot":[47,77,91,128,153,188],"solutions.":[48],"This":[49,130,184],"article":[50],"emphasises":[51],"need":[53],"capture":[55],"these":[56],"for":[58,94,148],"enhanced":[59],"threat":[60,182,196],"intelligence,":[61],"detection,":[62],"protection.":[64],"To":[65],"address":[66],"this,":[67],"we":[68],"propose":[69],"design":[71],"deployment":[73],"customized":[76],"network":[78,92],"based":[79],"on":[80,87],"adaptive":[81],"camouflaging":[82],"techniques.":[83],"Our":[84,162],"work":[85],"focuses":[86],"orchestrating":[88],"behavioral":[90],"tailored":[93],"three":[95],"APT":[96],"groups,":[97],"with":[98,104,177],"strategically":[99],"positioned":[100],"attack":[101],"paths":[102],"aligning":[103],"tactics,":[106],"techniques,":[107],"procedures,":[109],"covering":[110],"all":[111],"kill":[113],"chain":[114],"phases.":[115],"We":[116],"introduce":[117],"novel":[119],"approach,":[120],"deploying":[121],"camouflaged":[123],"chatterbox":[124],"application":[125,131],"within":[126],"network.":[129],"offers":[132],"regular":[134],"chat":[135],"interface":[136],"while":[137],"periodically":[138],"tracking":[139],"attacker":[140],"activity":[141],"by":[142],"periodic":[144],"log":[145],"transfers.":[146],"Deployed":[147],"100":[149],"days,":[150],"our":[151],"orchestrated":[152],"recorded":[154],"13,906,945":[155],"hits":[156],"from":[157,174],"4,238":[158],"unique":[159],"IP":[160],"addresses.":[161],"approach":[163],"categorizes":[164],"attackers,":[165],"discerning":[166],"varying":[167],"levels":[168],"sophistication,":[170],"identifies":[172],"attacks":[173],"Hong":[175],"Kong":[176],"similarities":[178],"known":[180],"Chinese":[181],"groups.":[183],"research":[185],"significantly":[186],"advances":[187],"technology":[189],"enhances":[191],"understanding":[193],"sophisticated":[195],"actors\u2019":[197],"strategies":[198],"in":[199],"real":[200],"operating":[201],"networks.":[202]},"counts_by_year":[{"year":2026,"cited_by_count":7},{"year":2025,"cited_by_count":7},{"year":2024,"cited_by_count":2}],"updated_date":"2026-11-07T11:25:07.637180","created_date":"2024-03-08T00:00:00"}