{"id":"https://openalex.org/W46294098","doi":null,"title":"Using honeypots to analyse anomalous Internet activities","display_name":"Using honeypots to analyse anomalous Internet activities","publication_year":2009,"publication_date":"2009-01-01","ids":{"openalex":"https://openalex.org/W46294098","mag":"46294098"},"language":"en","primary_location":{"id":"mag:46294098","doi":null,"is_oa":false,"landing_page_url":"https://eprints.qut.edu.au/31833/","pdf_url":null,"source":{"id":"https://openalex.org/S4306510317","display_name":"Faculty of Science and Technology; Information Security Institute","issn_l":null,"issn":null,"is_oa":false,"is_in_doaj":false,"is_core":false,"listed_in":[],"host_organization":null,"host_organization_name":null,"host_organization_lineage":[],"host_organization_lineage_names":[],"type":"journal"},"license":null,"license_id":null,"version":null,"is_accepted":false,"is_published":false,"raw_source_name":"Faculty of Science and Technology; Information Security Institute","raw_type":null},"volume":null,"type":"dissertation","is_traditional":true,"indexed_in":[],"open_access":{"is_oa":false,"oa_status":"closed","oa_url":null,"any_repository_has_fulltext":false},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5028614097","display_name":"Saleh I. Almotairi","orcid":null,"observed_orcids":[]},"institutions":[],"countries":[],"is_corresponding":true,"raw_author_name":"Saleh I. Almotairi","raw_affiliation_strings":[],"raw_orcid":null,"affiliations":[]}],"institutions":[],"countries_distinct_count":0,"institutions_distinct_count":0,"corresponding_author_ids":["https://openalex.org/A5028614097"],"corresponding_institution_ids":[],"apc_list":null,"apc_paid":null,"fwci":null,"has_fulltext":false,"cited_by_count":2,"citation_normalized_percentile":null,"cited_by_percentile_year":null,"biblio":{"volume":null,"issue":null,"first_page":null,"last_page":null},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T10400","display_name":"Network Security and Intrusion Detection","score":0.9984999895095825,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T10400","display_name":"Network Security and Intrusion Detection","score":0.9984999895095825,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11598","display_name":"Internet Traffic Analysis and Secure E-voting","score":0.00019999999494757503,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11644","display_name":"Spam and Phishing Detection","score":0.00019999999494757503,"subfield":{"id":"https://openalex.org/subfields/1710","display_name":"Information Systems"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/honeypots","display_name":"honeypots","score":0.9819999933242798},{"id":"https://openalex.org/keywords/low-interaction-honeypots","display_name":"low-interaction honeypots","score":0.9850000143051147},{"id":"https://openalex.org/keywords/attack-detection","display_name":"attack detection","score":0.7289999723434448},{"id":"https://openalex.org/keywords/principal-component-analysis","display_name":"principal component analysis","score":0.9729999899864197},{"id":"https://openalex.org/keywords/recursive-principal-component-analysis","display_name":"recursive principal component analysis","score":0.9649999737739563},{"id":"https://openalex.org/keywords/real-time-attack-detection","display_name":"real-time attack detection","score":0.8109999895095825},{"id":"https://openalex.org/keywords/worms","display_name":"worms","score":0.4819999933242798},{"id":"https://openalex.org/keywords/network-security-monitoring","display_name":"network security monitoring","score":0.6200000047683716}],"concepts":[{"id":"https://openalex.org/C191267431","wikidata":"https://www.wikidata.org/wiki/Q911932","display_name":"Honeypot","level":2,"score":0.9981647729873657},{"id":"https://openalex.org/C110875604","wikidata":"https://www.wikidata.org/wiki/Q75","display_name":"The Internet","level":2,"score":0.704216718673706},{"id":"https://openalex.org/C38652104","wikidata":"https://www.wikidata.org/wiki/Q3510521","display_name":"Computer security","level":1,"score":0.6986333131790161},{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.6701629757881165},{"id":"https://openalex.org/C182590292","wikidata":"https://www.wikidata.org/wiki/Q989632","display_name":"Network security","level":2,"score":0.5920045375823975},{"id":"https://openalex.org/C136764020","wikidata":"https://www.wikidata.org/wiki/Q466","display_name":"World Wide Web","level":1,"score":0.2416684925556183}],"mesh":[],"locations_count":1,"locations":[{"id":"mag:46294098","doi":null,"is_oa":false,"landing_page_url":"https://eprints.qut.edu.au/31833/","pdf_url":null,"source":{"id":"https://openalex.org/S4306510317","display_name":"Faculty of Science and Technology; Information Security Institute","issn_l":null,"issn":null,"is_oa":false,"is_in_doaj":false,"is_core":false,"listed_in":[],"host_organization":null,"host_organization_name":null,"host_organization_lineage":[],"host_organization_lineage_names":[],"type":"journal"},"license":null,"license_id":null,"version":null,"is_accepted":false,"is_published":false,"raw_source_name":"Faculty of Science and Technology; Information Security Institute","raw_type":null}],"best_oa_location":null,"sustainable_development_goals":[],"study_designs":[],"awards":[],"funders":[],"has_content":{"pdf":false,"grobid_xml":false},"content_urls":null,"referenced_works_count":22,"referenced_works":["https://openalex.org/W341626899","https://openalex.org/W1498585374","https://openalex.org/W1514368868","https://openalex.org/W1522592232","https://openalex.org/W1546137167","https://openalex.org/W1552584884","https://openalex.org/W1563061804","https://openalex.org/W1570549471","https://openalex.org/W1583975142","https://openalex.org/W1612920240","https://openalex.org/W1993929036","https://openalex.org/W2024964356","https://openalex.org/W2029890144","https://openalex.org/W2047668894","https://openalex.org/W2106442760","https://openalex.org/W2117667893","https://openalex.org/W2138845856","https://openalex.org/W2152820192","https://openalex.org/W2161830378","https://openalex.org/W2166559705","https://openalex.org/W3099514962","https://openalex.org/W3121158818"],"related_works":["https://openalex.org/W7113259257","https://openalex.org/W7100843153","https://openalex.org/W2145592206","https://openalex.org/W2189369134","https://openalex.org/W7098242611","https://openalex.org/W4283692618","https://openalex.org/W2264376790","https://openalex.org/W3096178011","https://openalex.org/W2158007046","https://openalex.org/W133994219"],"abstract_inverted_index":{"Monitoring":[0],"Internet":[1,89,205],"traffic":[2,36,121,206,217,310,345],"is":[3,70,102,137,229],"critical":[4],"in":[5,20,140,231,294,307],"order":[6],"to":[7,14,34,157,286,298],"acquire":[8],"a":[9,86,125],"good":[10],"understanding":[11],"of":[12,73,88,113,119,129,149,160,222,236,241,251,257,260,282,290,304,314,329,340],"threats":[13],"computer":[15,23],"and":[16,19,27,49,59,68,122,186,263,297,320,347],"network":[17,28,44],"security":[18,24,79,221],"designing":[21],"efficient":[22],"systems.":[25],"Researchers":[26],"administrators":[29],"have":[30],"applied":[31],"several":[32],"approaches":[33],"monitoring":[35,43,50,58],"for":[37,57,81,169,198,203,343],"malicious":[38,61,105,244],"content.":[39],"These":[40],"techniques":[41,183,202],"include":[42],"components,":[45],"aggregating":[46],"IDS":[47],"alerts,":[48],"unused":[51],"IP":[52],"address":[53],"spaces.":[54],"Another":[55],"method":[56],"analyzing":[60,170,204],"traffic,":[62],"which":[63],"has":[64,154],"been":[65,155],"widely":[66],"tried":[67],"accepted,":[69],"the":[71,114,117,141,150,158,165,196,220,226,277,288,312,315,321],"use":[72,259,313],"honeypots.":[74,211],"Honeypots":[75],"are":[76,178,184],"very":[77],"valuable":[78,127],"resources":[80],"gathering":[82],"artefacts":[83],"associated":[84],"with":[85,100],"variety":[87],"attack":[90,261,264],"activities.":[91],"As":[92],"honeypots":[93,153,162,296],"run":[94],"no":[95],"production":[96],"services,":[97],"any":[98],"contact":[99],"them":[101],"considered":[103],"potentially":[104],"or":[106,163,239],"suspicious":[107],"by":[108],"definition.":[109],"This":[110,193],"unique":[111],"characteristic":[112],"honeypot":[115,142,216,227,309,344],"reduces":[116],"amount":[118],"collected":[120,172,208],"makes":[123],"it":[124],"more":[126,200],"source":[128],"information":[130],"than":[131],"other":[132],"existing":[133,191],"techniques.":[134],"Currently,":[135],"there":[136],"insufficient":[138],"research":[139,194,253],"data":[143,171,207,228],"analysis":[144,182,285,346],"field.":[145],"To":[146],"date,":[147],"most":[148],"work":[151],"on":[152,189],"devoted":[156],"design":[159],"new":[161,237,242,305,330],"optimizing":[164],"current":[166],"ones.":[167],"Approaches":[168],"from":[173,209],"honeypots,":[174,177],"especially":[175],"low-interaction":[176,210,295,308],"presently":[179],"immature,":[180],"while":[181],"manual":[185],"focus":[187],"mainly":[188],"identifying":[190],"attacks.":[192],"addresses":[195],"need":[197],"developing":[199],"advanced":[201],"We":[212],"believe":[213],"that":[214,269],"characterizing":[215],"will":[218],"improve":[219],"networks":[223],"and,":[224],"if":[225],"handled":[230],"time,":[232],"give":[233],"early":[234],"signs":[235],"vulnerabilities":[238],"breakouts":[240],"automated":[243],"codes,":[245],"such":[246],"as":[247],"worms.":[248],"The":[249],"outcomes":[250],"this":[252],"include:":[254],"\u2022":[255,280,302,326,337],"Identification":[256],"repeated":[258],"tools":[262],"processes":[265],"through":[266,311],"grouping":[267],"activities":[268,292],"exhibit":[270],"similar":[271],"packet":[272],"inter-arrival":[273],"time":[274,349],"distributions":[275],"using":[276,332],"cliquing":[278],"algorithm;":[279],"Application":[281],"principal":[283,316,334],"component":[284,335],"detect":[287],"structure":[289],"attackers\u2019":[291,300],"present":[293],"visualize":[299],"behaviors;":[301],"Detection":[303],"attacks":[306,331],"component\u2019s":[317],"residual":[318],"space":[319],"square":[322],"prediction":[323],"error":[324],"statistic;":[325],"Real-time":[327],"detection":[328],"recursive":[333],"analysis;":[336],"A":[338],"proof":[339],"concept":[341],"implementation":[342],"real":[348],"monitoring.":[350]},"counts_by_year":[{"year":2017,"cited_by_count":1},{"year":2013,"cited_by_count":1}],"updated_date":"2026-11-04T10:54:05.112534","created_date":"2016-06-24T00:00:00"}