{"id":"https://openalex.org/W7147448564","doi":"https://doi.org/10.3390/fi18040190","title":"A Review of Honeypots: Fingerprinting Techniques, Detection, and Evasion Mechanisms","display_name":"A Review of Honeypots: Fingerprinting Techniques, Detection, and Evasion Mechanisms","publication_year":2026,"publication_date":"2026-04-01","ids":{"openalex":"https://openalex.org/W7147448564","doi":"https://doi.org/10.3390/fi18040190"},"language":"en","primary_location":{"id":"doi:10.3390/fi18040190","doi":"https://doi.org/10.3390/fi18040190","is_oa":true,"landing_page_url":"https://doi.org/10.3390/fi18040190","pdf_url":"https://www.mdpi.com/1999-5903/18/4/190/pdf?version=1775044157","source":{"id":"https://openalex.org/S34838331","display_name":"Future Internet","issn_l":"1999-5903","issn":["1999-5903"],"is_oa":true,"is_in_doaj":true,"is_core":true,"listed_in":["anvur-scientific","cwts-core","doaj","norway-1","poland-40","russia-white-list-2","vabb-shw"],"host_organization":"https://openalex.org/P4310310987","host_organization_name":"Multidisciplinary Digital Publishing Institute","host_organization_lineage":["https://openalex.org/P4310310987"],"host_organization_lineage_names":["Multidisciplinary Digital Publishing Institute"],"type":"journal"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Future Internet","raw_type":"journal-article"},"volume":null,"type":"article","indexed_in":["crossref","doaj"],"open_access":{"is_oa":true,"oa_status":"gold","oa_url":"https://www.mdpi.com/1999-5903/18/4/190/pdf?version=1775044157","any_repository_has_fulltext":true},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5132697854","display_name":"Arooj Chaudhry","orcid":null,"observed_orcids":[]},"institutions":[{"id":"https://openalex.org/I96673099","display_name":"Technical University of Denmark","ror":"https://ror.org/04qtj9h94","country_code":"DK","type":"education","lineage":["https://openalex.org/I96673099"]}],"countries":["DK"],"is_corresponding":false,"raw_author_name":"Arooj Chaudhry","raw_affiliation_strings":["DTU Compute, Department of Applied Mathematics and Computer Science, Technical University of Denmark, 2800 Kongens Lyngby, Denmark"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"DTU Compute, Department of Applied Mathematics and Computer Science, Technical University of Denmark, 2800 Kongens Lyngby, Denmark","institution_ids":["https://openalex.org/I96673099"]}]},{"author_position":"middle","author":{"id":null,"display_name":"Casper Andersen","orcid":"https://orcid.org/0009-0007-0811-7181","observed_orcids":["https://orcid.org/0009-0007-0811-7181"]},"institutions":[{"id":"https://openalex.org/I96673099","display_name":"Technical University of Denmark","ror":"https://ror.org/04qtj9h94","country_code":"DK","type":"education","lineage":["https://openalex.org/I96673099"]}],"countries":["DK"],"is_corresponding":false,"raw_author_name":"Casper Andersen","raw_affiliation_strings":["DTU Compute, Department of Applied Mathematics and Computer Science, Technical University of Denmark, 2800 Kongens Lyngby, Denmark"],"raw_orcid":"https://orcid.org/0009-0007-0811-7181","affiliations":[{"raw_affiliation_string":"DTU Compute, Department of Applied Mathematics and Computer Science, Technical University of Denmark, 2800 Kongens Lyngby, Denmark","institution_ids":["https://openalex.org/I96673099"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5042988035","display_name":"Gaurav Choudhary","orcid":"https://orcid.org/0000-0003-3378-2945","observed_orcids":["https://orcid.org/0000-0003-3378-2945"]},"institutions":[{"id":"https://openalex.org/I96673099","display_name":"Technical University of Denmark","ror":"https://ror.org/04qtj9h94","country_code":"DK","type":"education","lineage":["https://openalex.org/I96673099"]}],"countries":["DK"],"is_corresponding":false,"raw_author_name":"Gaurav Choudhary","raw_affiliation_strings":["DTU Compute, Department of Applied Mathematics and Computer Science, Technical University of Denmark, 2800 Kongens Lyngby, Denmark"],"raw_orcid":"https://orcid.org/0000-0003-3378-2945","affiliations":[{"raw_affiliation_string":"DTU Compute, Department of Applied Mathematics and Computer Science, Technical University of Denmark, 2800 Kongens Lyngby, Denmark","institution_ids":["https://openalex.org/I96673099"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5006444565","display_name":"Nicola Dragoni","orcid":"https://orcid.org/0000-0001-9575-2990","observed_orcids":["https://orcid.org/0000-0001-9575-2990"]},"institutions":[{"id":"https://openalex.org/I96673099","display_name":"Technical University of Denmark","ror":"https://ror.org/04qtj9h94","country_code":"DK","type":"education","lineage":["https://openalex.org/I96673099"]}],"countries":["DK"],"is_corresponding":true,"raw_author_name":"Nicola Dragoni","raw_affiliation_strings":["DTU Compute, Department of Applied Mathematics and Computer Science, Technical University of Denmark, 2800 Kongens Lyngby, Denmark"],"raw_orcid":"https://orcid.org/0000-0001-9575-2990","affiliations":[{"raw_affiliation_string":"DTU Compute, Department of Applied Mathematics and Computer Science, Technical University of Denmark, 2800 Kongens Lyngby, Denmark","institution_ids":["https://openalex.org/I96673099"]}]}],"institutions":[],"countries_distinct_count":1,"institutions_distinct_count":1,"corresponding_author_ids":["https://openalex.org/A5006444565"],"corresponding_institution_ids":["https://openalex.org/I96673099"],"apc_list":{"value":1600,"currency":"CHF","value_usd":1930},"apc_paid":{"value":1600,"currency":"CHF","value_usd":1930},"fwci":0.0,"has_fulltext":true,"cited_by_count":0,"citation_normalized_percentile":{"value":0.20452757,"is_in_top_1_percent":false,"is_in_top_10_percent":false},"cited_by_percentile_year":null,"biblio":{"volume":"18","issue":"4","first_page":"190","last_page":"190"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T10400","display_name":"Network Security and Intrusion Detection","score":0.9848999977111816,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T10400","display_name":"Network Security and Intrusion Detection","score":0.9848999977111816,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11424","display_name":"Security and Verification in Computing","score":0.0038999998942017555,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11644","display_name":"Spam and Phishing Detection","score":0.003599999938160181,"subfield":{"id":"https://openalex.org/subfields/1710","display_name":"Information Systems"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/honeypots","display_name":"honeypots","score":0.968999981880188},{"id":"https://openalex.org/keywords/honeypot-detection","display_name":"honeypot detection","score":0.7080000042915344},{"id":"https://openalex.org/keywords/obfuscation","display_name":"obfuscation","score":0.7129999995231628},{"id":"https://openalex.org/keywords/low-interaction-honeypots","display_name":"low-interaction honeypots","score":0.9570000171661377},{"id":"https://openalex.org/keywords/high-interaction-honeypot","display_name":"high-interaction honeypots","score":1.0},{"id":"https://openalex.org/keywords/network-protocol-vulnerabilities","display_name":"network protocol vulnerabilities","score":0.6169999837875366},{"id":"https://openalex.org/keywords/virtualization","display_name":"virtualization","score":0.703000009059906}],"concepts":[{"id":"https://openalex.org/C191267431","wikidata":"https://www.wikidata.org/wiki/Q911932","display_name":"Honeypot","level":2,"score":0.9921000003814697},{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.8205000162124634},{"id":"https://openalex.org/C38652104","wikidata":"https://www.wikidata.org/wiki/Q3510521","display_name":"Computer security","level":1,"score":0.7465999722480774},{"id":"https://openalex.org/C2781251061","wikidata":"https://www.wikidata.org/wiki/Q5416089","display_name":"Evasion (ethics)","level":3,"score":0.7148000001907349},{"id":"https://openalex.org/C2777826928","wikidata":"https://www.wikidata.org/wiki/Q3745713","display_name":"Fingerprint (computing)","level":2,"score":0.5274999737739563},{"id":"https://openalex.org/C40305131","wikidata":"https://www.wikidata.org/wiki/Q2616305","display_name":"Obfuscation","level":2,"score":0.4498000144958496},{"id":"https://openalex.org/C79974875","wikidata":"https://www.wikidata.org/wiki/Q483639","display_name":"Cloud computing","level":2,"score":0.42730000615119934},{"id":"https://openalex.org/C136197465","wikidata":"https://www.wikidata.org/wiki/Q1729295","display_name":"Variety (cybernetics)","level":2,"score":0.4129999876022339},{"id":"https://openalex.org/C2780385302","wikidata":"https://www.wikidata.org/wiki/Q367158","display_name":"Protocol (science)","level":3,"score":0.3741999864578247},{"id":"https://openalex.org/C182590292","wikidata":"https://www.wikidata.org/wiki/Q989632","display_name":"Network security","level":2,"score":0.3555000126361847},{"id":"https://openalex.org/C9652623","wikidata":"https://www.wikidata.org/wiki/Q190109","display_name":"Field (mathematics)","level":2,"score":0.3249000012874603},{"id":"https://openalex.org/C2522767166","wikidata":"https://www.wikidata.org/wiki/Q2374463","display_name":"Data science","level":1,"score":0.3237000107765198},{"id":"https://openalex.org/C112930515","wikidata":"https://www.wikidata.org/wiki/Q4389547","display_name":"Risk analysis (engineering)","level":1,"score":0.2540000081062317},{"id":"https://openalex.org/C35525427","wikidata":"https://www.wikidata.org/wiki/Q745881","display_name":"Intrusion detection system","level":2,"score":0.2533999979496002}],"mesh":[],"locations_count":2,"locations":[{"id":"doi:10.3390/fi18040190","doi":"https://doi.org/10.3390/fi18040190","is_oa":true,"landing_page_url":"https://doi.org/10.3390/fi18040190","pdf_url":"https://www.mdpi.com/1999-5903/18/4/190/pdf?version=1775044157","source":{"id":"https://openalex.org/S34838331","display_name":"Future Internet","issn_l":"1999-5903","issn":["1999-5903"],"is_oa":true,"is_in_doaj":true,"is_core":true,"listed_in":["anvur-scientific","cwts-core","doaj","norway-1","poland-40","russia-white-list-2","vabb-shw"],"host_organization":"https://openalex.org/P4310310987","host_organization_name":"Multidisciplinary Digital Publishing Institute","host_organization_lineage":["https://openalex.org/P4310310987"],"host_organization_lineage_names":["Multidisciplinary Digital Publishing Institute"],"type":"journal"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Future Internet","raw_type":"journal-article"},{"id":"pmh:oai:doaj.org/article:d68bd537be554f85bc06fd75f38ea7af","doi":null,"is_oa":true,"landing_page_url":"https://doaj.org/article/d68bd537be554f85bc06fd75f38ea7af","pdf_url":null,"source":{"id":"https://openalex.org/S4306401280","display_name":"DOAJ (DOAJ: Directory of Open Access Journals)","issn_l":null,"issn":null,"is_oa":false,"is_in_doaj":false,"is_core":false,"listed_in":[],"host_organization":null,"host_organization_name":null,"host_organization_lineage":[],"host_organization_lineage_names":[],"type":"repository"},"license":"cc-by-sa","license_id":"https://openalex.org/licenses/cc-by-sa","version":"submittedVersion","is_accepted":false,"is_published":false,"raw_source_name":"Future Internet, Vol 18, Iss 4, p 190 (2026)","raw_type":"article"}],"best_oa_location":{"id":"doi:10.3390/fi18040190","doi":"https://doi.org/10.3390/fi18040190","is_oa":true,"landing_page_url":"https://doi.org/10.3390/fi18040190","pdf_url":"https://www.mdpi.com/1999-5903/18/4/190/pdf?version=1775044157","source":{"id":"https://openalex.org/S34838331","display_name":"Future Internet","issn_l":"1999-5903","issn":["1999-5903"],"is_oa":true,"is_in_doaj":true,"is_core":true,"listed_in":["anvur-scientific","cwts-core","doaj","norway-1","poland-40","russia-white-list-2","vabb-shw"],"host_organization":"https://openalex.org/P4310310987","host_organization_name":"Multidisciplinary Digital Publishing Institute","host_organization_lineage":["https://openalex.org/P4310310987"],"host_organization_lineage_names":["Multidisciplinary Digital Publishing Institute"],"type":"journal"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Future Internet","raw_type":"journal-article"},"sustainable_development_goals":[],"sustainable_development_goals_aurora":[{"display_name":"Industry, innovation and infrastructure","id":"https://metadata.un.org/sdg/9","score":0.6414264440536499}],"study_designs":[],"awards":[],"funders":[],"has_content":{"pdf":true,"grobid_xml":true},"content_urls":{"pdf":"https://content.openalex.org/works/W7147448564.pdf","grobid_xml":"https://content.openalex.org/works/W7147448564.grobid-xml"},"referenced_works_count":63,"referenced_works":["https://openalex.org/W96453956","https://openalex.org/W1527006209","https://openalex.org/W1975675278","https://openalex.org/W1999798506","https://openalex.org/W2049243455","https://openalex.org/W2073148641","https://openalex.org/W2146350924","https://openalex.org/W2151584216","https://openalex.org/W2169503979","https://openalex.org/W2181679282","https://openalex.org/W2462751245","https://openalex.org/W2552542906","https://openalex.org/W2597756285","https://openalex.org/W2607460355","https://openalex.org/W2608113618","https://openalex.org/W2619340791","https://openalex.org/W2784307305","https://openalex.org/W2902669569","https://openalex.org/W2904186854","https://openalex.org/W2913412946","https://openalex.org/W2913478401","https://openalex.org/W2940266355","https://openalex.org/W2973801020","https://openalex.org/W2974610713","https://openalex.org/W2988961468","https://openalex.org/W2997020756","https://openalex.org/W3003960714","https://openalex.org/W3009972416","https://openalex.org/W3016587487","https://openalex.org/W3049465110","https://openalex.org/W3112464176","https://openalex.org/W3153481935","https://openalex.org/W3156178383","https://openalex.org/W3164488392","https://openalex.org/W3187251708","https://openalex.org/W3188748135","https://openalex.org/W3200432204","https://openalex.org/W3207029297","https://openalex.org/W3210674489","https://openalex.org/W4281253703","https://openalex.org/W4283645148","https://openalex.org/W4285240522","https://openalex.org/W4311165999","https://openalex.org/W4321793960","https://openalex.org/W4361251690","https://openalex.org/W4375853895","https://openalex.org/W4382396215","https://openalex.org/W4385801147","https://openalex.org/W4386865612","https://openalex.org/W4387917900","https://openalex.org/W4388074397","https://openalex.org/W4388925690","https://openalex.org/W4389372568","https://openalex.org/W4391547594","https://openalex.org/W4392364798","https://openalex.org/W4399169133","https://openalex.org/W4404600696","https://openalex.org/W4404914360","https://openalex.org/W4407129610","https://openalex.org/W4410537191","https://openalex.org/W4412830319","https://openalex.org/W4413640289","https://openalex.org/W4414500217"],"related_works":[],"abstract_inverted_index":{"Honeypot":[0],"fingerprinting":[1,49,119],"poses":[2],"a":[3,39,57,114],"significant":[4],"threat":[5],"in":[6,88,173],"cybersecurity,":[7],"as":[8,27,155],"attackers":[9,66],"who":[10],"are":[11,103],"able":[12],"to":[13,46,68,135],"identify":[14],"honeypot":[15,48,52,72,118,140,161,177],"systems":[16],"can":[17],"successfully":[18],"evade":[19],"them,":[20],"thereby":[21],"greatly":[22],"reducing":[23],"their":[24,106],"overall":[25],"effectiveness":[26,107],"defensive":[28],"and":[29,44,50,63,70,77,91,100,108,131,149,158,163,168],"intelligence-gathering":[30],"tools.":[31],"Over":[32],"the":[33,61,126,137,174],"years,":[34],"numerous":[35],"studies":[36],"have":[37],"proposed":[38],"variety":[40],"of":[41,60,117,139,176],"analytical":[42],"techniques":[43,102],"countermeasures":[45],"minimize":[47],"improve":[51],"stealth.":[53],"This":[54],"paper":[55,83,112,144],"presents":[56],"comprehensive":[58],"examination":[59],"methods":[62],"strategies":[64,134],"that":[65,94],"employ":[67],"detect":[69],"fingerprint":[71],"systems,":[73],"including":[74],"behavioural,":[75],"network-based,":[76],"system-level":[78],"indicators.":[79],"In":[80],"addition,":[81],"this":[82,111,143],"analyzes":[84],"common":[85],"vulnerabilities":[86],"inherent":[87],"both":[89],"low-interaction":[90],"high-interaction":[92],"honeypots":[93],"facilitate":[95],"successful":[96],"fingerprinting.":[97],"Existing":[98],"anti-detection":[99],"obfuscation":[101],"evaluated":[104],"for":[105],"limitations.":[109],"Specifically,":[110],"offers":[113],"structured":[115],"analysis":[116],"techniques,":[120],"examines":[121],"attackers\u2019":[122],"probing":[123],"strategies,":[124],"evaluates":[125],"most":[127],"vulnerable":[128],"protocol":[129],"artifacts,":[130],"outlines":[132],"mitigation":[133],"reduce":[136],"likelihood":[138],"detection.":[141],"Finally,":[142],"discusses":[145],"how":[146],"emerging":[147],"technologies":[148],"increasingly":[150],"complex":[151],"computing":[152],"environments,":[153],"such":[154],"cloud":[156],"infrastructure":[157],"virtualization,":[159],"impact":[160],"deployment,":[162],"it":[164],"highlights":[165],"open":[166],"challenges":[167],"promising":[169],"future":[170],"research":[171],"directions":[172],"field":[175],"anti-fingerprinting.":[178]},"counts_by_year":[],"updated_date":"2026-10-14T16:39:01.820549","created_date":"2026-04-02T00:00:00"}