{"id":"https://openalex.org/W7224914086","doi":"https://doi.org/10.64388/ire1724506","title":"ThreatLens: An Intelligent IoT Honeypot for Cyber-Attack Monitoring and Threat Analysis Using ESP32","display_name":"ThreatLens: An Intelligent IoT Honeypot for Cyber-Attack Monitoring and Threat Analysis Using ESP32","publication_year":2026,"publication_date":"2026-10-30","ids":{"openalex":"https://openalex.org/W7224914086","doi":"https://doi.org/10.64388/ire1724506"},"language":"en","primary_location":{"id":"doi:10.64388/ire1724506","doi":"https://doi.org/10.64388/ire1724506","is_oa":true,"landing_page_url":"https://doi.org/10.64388/ire1724506","pdf_url":"https://www.irejournals.com/formatedpaper/1724506.pdf","source":{"id":"https://openalex.org/S5407000720","display_name":"Iconic Research and Engineering Journals","issn_l":"2456-8880","issn":["2456-8880"],"is_oa":false,"is_in_doaj":false,"is_core":false,"listed_in":[],"host_organization":null,"host_organization_name":null,"host_organization_lineage":[],"host_organization_lineage_names":[],"type":"journal"},"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Iconic Research and Engineering Journals","raw_type":"journal-article"},"volume":null,"type":"article","is_traditional":true,"indexed_in":["crossref"],"open_access":{"is_oa":true,"oa_status":"bronze","oa_url":"https://www.irejournals.com/formatedpaper/1724506.pdf","any_repository_has_fulltext":false},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5160217522","display_name":"Nandishwar EN","orcid":null,"observed_orcids":[]},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Nandishwar EN","raw_affiliation_strings":["Alvas Institute of Engineering and Technology, Mijar"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Alvas Institute of Engineering and Technology, Mijar","institution_ids":[]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5128219418","display_name":"Prof. Fayaz Ahamed Shaikh","orcid":null,"observed_orcids":[]},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Fayaz Ahamed Shaikh","raw_affiliation_strings":[],"raw_orcid":null,"affiliations":[]},{"author_position":"middle","author":{"id":"https://openalex.org/A5160180370","display_name":"Amith Shetty","orcid":null,"observed_orcids":[]},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Amith Shetty","raw_affiliation_strings":["Alva's Institute of Engineering and Technology , Mijar , Moodbidri , Karnataka , India"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Alva's Institute of Engineering and Technology , Mijar , Moodbidri , Karnataka , India","institution_ids":[]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5160234037","display_name":"Prajna","orcid":null,"observed_orcids":[]},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Prajna","raw_affiliation_strings":[],"raw_orcid":null,"affiliations":[]},{"author_position":"last","author":{"id":"https://openalex.org/A5160217998","display_name":"Shiva Prasad HG","orcid":null,"observed_orcids":[]},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Shiva Prasad HG","raw_affiliation_strings":[],"raw_orcid":null,"affiliations":[]}],"institutions":[],"countries_distinct_count":0,"institutions_distinct_count":0,"corresponding_author_ids":[],"corresponding_institution_ids":[],"apc_list":null,"apc_paid":null,"fwci":0.0,"has_fulltext":true,"cited_by_count":0,"citation_normalized_percentile":{"value":0.83509042,"is_in_top_1_percent":false,"is_in_top_10_percent":false},"cited_by_percentile_year":null,"biblio":{"volume":"10","issue":"5","first_page":"51","last_page":"60"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T10400","display_name":"Network Security and Intrusion Detection","score":0.9907000064849854,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T10400","display_name":"Network Security and Intrusion Detection","score":0.9907000064849854,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T10273","display_name":"IoT and Edge/Fog Computing","score":0.004600000102072954,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T12222","display_name":"IoT-based Smart Home Systems","score":0.0006000000284984708,"subfield":{"id":"https://openalex.org/subfields/2208","display_name":"Electrical and Electronic Engineering"},"field":{"id":"https://openalex.org/fields/22","display_name":"Engineering"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/esp32","display_name":"ESP32 microcontroller","score":0.8270000219345093},{"id":"https://openalex.org/keywords/iot-security","display_name":"Internet of Things security","score":0.7730000019073486},{"id":"https://openalex.org/keywords/credential-stuffing","display_name":"credential stuffing","score":0.9150000214576721},{"id":"https://openalex.org/keywords/embedded-systems-security","display_name":"embedded systems security","score":0.44999998807907104},{"id":"https://openalex.org/keywords/low-cost-hardware","display_name":"low-cost hardware","score":0.38999998569488525}],"concepts":[{"id":"https://openalex.org/C191267431","wikidata":"https://www.wikidata.org/wiki/Q911932","display_name":"Honeypot","level":2,"score":0.7333999872207642},{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.7026000022888184},{"id":"https://openalex.org/C38652104","wikidata":"https://www.wikidata.org/wiki/Q3510521","display_name":"Computer security","level":1,"score":0.6348999738693237},{"id":"https://openalex.org/C79974875","wikidata":"https://www.wikidata.org/wiki/Q483639","display_name":"Cloud computing","level":2,"score":0.5365999937057495},{"id":"https://openalex.org/C22735295","wikidata":"https://www.wikidata.org/wiki/Q317671","display_name":"Botnet","level":3,"score":0.4918999969959259},{"id":"https://openalex.org/C38822068","wikidata":"https://www.wikidata.org/wiki/Q131406","display_name":"Denial-of-service attack","level":3,"score":0.4715000092983246},{"id":"https://openalex.org/C67212190","wikidata":"https://www.wikidata.org/wiki/Q104851","display_name":"Firmware","level":2,"score":0.44859999418258667},{"id":"https://openalex.org/C2776538122","wikidata":"https://www.wikidata.org/wiki/Q160470","display_name":"Telnet","level":4,"score":0.44429999589920044},{"id":"https://openalex.org/C35525427","wikidata":"https://www.wikidata.org/wiki/Q745881","display_name":"Intrusion detection system","level":2,"score":0.4268999993801117},{"id":"https://openalex.org/C148417208","wikidata":"https://www.wikidata.org/wiki/Q4825882","display_name":"Authentication (law)","level":2,"score":0.40389999747276306},{"id":"https://openalex.org/C111919701","wikidata":"https://www.wikidata.org/wiki/Q9135","display_name":"Operating system","level":1,"score":0.4034000039100647},{"id":"https://openalex.org/C33499554","wikidata":"https://www.wikidata.org/wiki/Q1417134","display_name":"Dashboard","level":2,"score":0.399399995803833},{"id":"https://openalex.org/C2779585090","wikidata":"https://www.wikidata.org/wiki/Q3457762","display_name":"Resilience (materials science)","level":2,"score":0.37470000982284546},{"id":"https://openalex.org/C10144332","wikidata":"https://www.wikidata.org/wiki/Q14645","display_name":"Rootkit","level":3,"score":0.36959999799728394},{"id":"https://openalex.org/C134066672","wikidata":"https://www.wikidata.org/wiki/Q1424639","display_name":"Payload (computing)","level":3,"score":0.3612000048160553},{"id":"https://openalex.org/C149635348","wikidata":"https://www.wikidata.org/wiki/Q193040","display_name":"Embedded system","level":1,"score":0.3582000136375427},{"id":"https://openalex.org/C182590292","wikidata":"https://www.wikidata.org/wiki/Q989632","display_name":"Network security","level":2,"score":0.35040000081062317},{"id":"https://openalex.org/C206345919","wikidata":"https://www.wikidata.org/wiki/Q20380951","display_name":"Resource (disambiguation)","level":2,"score":0.35010001063346863},{"id":"https://openalex.org/C109297577","wikidata":"https://www.wikidata.org/wiki/Q161157","display_name":"Password","level":2,"score":0.3422999978065491},{"id":"https://openalex.org/C93996380","wikidata":"https://www.wikidata.org/wiki/Q44127","display_name":"Server","level":2,"score":0.3393999934196472},{"id":"https://openalex.org/C31258907","wikidata":"https://www.wikidata.org/wiki/Q1301371","display_name":"Computer network","level":1,"score":0.33880001306533813},{"id":"https://openalex.org/C2781317605","wikidata":"https://www.wikidata.org/wiki/Q7832483","display_name":"Traffic analysis","level":2,"score":0.328000009059906},{"id":"https://openalex.org/C147494362","wikidata":"https://www.wikidata.org/wiki/Q2078905","display_name":"Troubleshooting","level":2,"score":0.32580000162124634},{"id":"https://openalex.org/C4924752","wikidata":"https://www.wikidata.org/wiki/Q184148","display_name":"Plug-in","level":2,"score":0.31709998846054077},{"id":"https://openalex.org/C2780615836","wikidata":"https://www.wikidata.org/wiki/Q2471869","display_name":"USable","level":2,"score":0.31459999084472656},{"id":"https://openalex.org/C148730421","wikidata":"https://www.wikidata.org/wiki/Q141090","display_name":"Encryption","level":2,"score":0.31360000371932983},{"id":"https://openalex.org/C188067584","wikidata":"https://www.wikidata.org/wiki/Q219363","display_name":"NetFlow","level":2,"score":0.3102000057697296},{"id":"https://openalex.org/C2775896111","wikidata":"https://www.wikidata.org/wiki/Q642560","display_name":"Router","level":2,"score":0.30799999833106995},{"id":"https://openalex.org/C9652623","wikidata":"https://www.wikidata.org/wiki/Q190109","display_name":"Field (mathematics)","level":2,"score":0.3041999936103821},{"id":"https://openalex.org/C110875604","wikidata":"https://www.wikidata.org/wiki/Q75","display_name":"The Internet","level":2,"score":0.30390000343322754},{"id":"https://openalex.org/C95362637","wikidata":"https://www.wikidata.org/wiki/Q54366","display_name":"Packet analyzer","level":3,"score":0.3028999865055084},{"id":"https://openalex.org/C105339364","wikidata":"https://www.wikidata.org/wiki/Q2297740","display_name":"Software deployment","level":2,"score":0.3025999963283539},{"id":"https://openalex.org/C113843644","wikidata":"https://www.wikidata.org/wiki/Q901882","display_name":"Interface (matter)","level":4,"score":0.3025999963283539},{"id":"https://openalex.org/C113324615","wikidata":"https://www.wikidata.org/wiki/Q472302","display_name":"Login","level":2,"score":0.2937000095844269},{"id":"https://openalex.org/C158379750","wikidata":"https://www.wikidata.org/wiki/Q214111","display_name":"Network packet","level":2,"score":0.2851000130176544},{"id":"https://openalex.org/C739882","wikidata":"https://www.wikidata.org/wiki/Q3560506","display_name":"Anomaly detection","level":2,"score":0.2831999957561493},{"id":"https://openalex.org/C2781045450","wikidata":"https://www.wikidata.org/wiki/Q254569","display_name":"Backdoor","level":2,"score":0.2831000089645386},{"id":"https://openalex.org/C2781251061","wikidata":"https://www.wikidata.org/wiki/Q5416089","display_name":"Evasion (ethics)","level":3,"score":0.2818000018596649},{"id":"https://openalex.org/C145804949","wikidata":"https://www.wikidata.org/wiki/Q478123","display_name":"Situation awareness","level":2,"score":0.2727000117301941},{"id":"https://openalex.org/C149810388","wikidata":"https://www.wikidata.org/wiki/Q5374873","display_name":"Emulation","level":2,"score":0.27149999141693115}],"mesh":[],"locations_count":1,"locations":[{"id":"doi:10.64388/ire1724506","doi":"https://doi.org/10.64388/ire1724506","is_oa":true,"landing_page_url":"https://doi.org/10.64388/ire1724506","pdf_url":"https://www.irejournals.com/formatedpaper/1724506.pdf","source":{"id":"https://openalex.org/S5407000720","display_name":"Iconic Research and Engineering Journals","issn_l":"2456-8880","issn":["2456-8880"],"is_oa":false,"is_in_doaj":false,"is_core":false,"listed_in":[],"host_organization":null,"host_organization_name":null,"host_organization_lineage":[],"host_organization_lineage_names":[],"type":"journal"},"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Iconic Research and Engineering Journals","raw_type":"journal-article"}],"best_oa_location":{"id":"doi:10.64388/ire1724506","doi":"https://doi.org/10.64388/ire1724506","is_oa":true,"landing_page_url":"https://doi.org/10.64388/ire1724506","pdf_url":"https://www.irejournals.com/formatedpaper/1724506.pdf","source":{"id":"https://openalex.org/S5407000720","display_name":"Iconic Research and Engineering Journals","issn_l":"2456-8880","issn":["2456-8880"],"is_oa":false,"is_in_doaj":false,"is_core":false,"listed_in":[],"host_organization":null,"host_organization_name":null,"host_organization_lineage":[],"host_organization_lineage_names":[],"type":"journal"},"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Iconic Research and Engineering Journals","raw_type":"journal-article"},"sustainable_development_goals":[],"study_designs":[],"awards":[],"funders":[],"has_content":{"grobid_xml":true,"pdf":true},"content_urls":{"pdf":"https://content.openalex.org/works/W7224914086.pdf","grobid_xml":"https://content.openalex.org/works/W7224914086.grobid-xml"},"referenced_works_count":7,"referenced_works":["https://openalex.org/W2797742547","https://openalex.org/W2848278845","https://openalex.org/W2904186854","https://openalex.org/W2980038013","https://openalex.org/W3187251708","https://openalex.org/W4388074397","https://openalex.org/W4416893011"],"related_works":["https://openalex.org/W4200515196","https://openalex.org/W6990181236","https://openalex.org/W4312426304","https://openalex.org/W1669806660","https://openalex.org/W6997632505","https://openalex.org/W7117668816","https://openalex.org/W6987213768","https://openalex.org/W2360903897","https://openalex.org/W2925118746","https://openalex.org/W4399486374"],"abstract_inverted_index":{"Internet":[0],"of":[1,18,68,106,161],"Things":[2],"devices":[3],"are":[4,119],"deployed":[5,218],"in":[6,45,134],"homes,":[7],"offices,":[8],"and":[9,28,39,103,112,122,146,177,180,185,193,206,241,245],"industrial":[10],"settings":[11],"with":[12,195],"little":[13],"regard":[14],"for":[15,35,142],"the":[16,19,22,62,151,182,232,246],"security":[17],"firmware":[20],"or":[21,55,65],"network":[23,66],"stack":[24],"running":[25,51],"on":[26,49,52,83,219],"them,":[27],"this":[29,46,166],"makes":[30],"them":[31,133],"a":[32,77,89,94,99,104,127,135,139,147,158,196,220],"persistent":[33],"target":[34],"automated":[36],"scanning,":[37],"credential-stuffing,":[38],"botnet-recruitment":[40],"campaigns.":[41],"Most":[42],"defensive":[43],"research":[44],"space":[47],"relies":[48],"honeypots":[50],"general-purpose":[53],"computers":[54],"cloud":[56],"instances,":[57],"which":[58,131],"do":[59],"not":[60,215,243],"reproduce":[61],"resource":[63],"constraints":[64],"footprint":[67],"an":[69,84,156],"actual":[70],"embedded":[71],"device.":[72],"This":[73],"paper":[74,164],"presents":[75],"ThreatLens,":[76],"low-cost":[78],"IoT":[79],"honeypot":[80],"built":[81,192],"directly":[82],"ESP32":[85],"microcontroller":[86],"that":[87,200],"exposes":[88],"decoy":[90],"router":[91],"login":[92],"portal,":[93],"live":[95,159,221],"ultrasonic-sensor":[96],"status":[97],"page,":[98],"simulated":[100],"Telnet":[101],"shell,":[102],"set":[105],"common-service":[107],"reconnaissance":[108,204],"traps":[109],"to":[110,126,154,210],"attract":[111],"record":[113],"unauthorized":[114],"access":[115],"attempts.":[116],"Captured":[117],"events":[118],"queued":[120],"on-device":[121],"forwarded":[123],"over":[124],"Wi-Fi":[125],"Flask":[128],"ingestion":[129],"service,":[130],"stores":[132],"SQLite":[136],"database":[137],"alongside":[138],"sliding-window":[140],"rule":[141],"flagging":[143],"brute-force":[144,207],"behaviour,":[145],"React":[148],"dashboard":[149,178],"polls":[150],"same":[152],"backend":[153,174],"give":[155],"analyst":[157],"view":[160],"activity.":[162],"The":[163,188],"describes":[165],"five-part":[167],"architecture":[168],"\u2014":[169,179],"edge":[170],"firmware,":[171],"log":[172],"transport,":[173],"storage,":[175],"analysis,":[176],"reports":[181],"current":[183],"implementation":[184],"validation":[186],"status.":[187],"system":[189],"has":[190,214],"been":[191,217],"exercised":[194],"synthetic":[197],"test":[198,233],"harness":[199],"reproduces":[201],"page":[202],"views,":[203],"probes,":[205],"sequences":[208],"end":[209],"end,":[211],"but":[212],"it":[213,239],"yet":[216],"network,":[222],"so":[223,236],"no":[224],"field":[225],"attack":[226],"data":[227],"is":[228],"reported;":[229],"we":[230],"describe":[231],"setup":[234],"used":[235],"far,":[237],"what":[238],"does":[240,242],"cover,":[244],"deployment":[247],"work":[248],"remaining":[249],"before":[250],"real-world":[251],"evaluation.":[252]},"counts_by_year":[],"updated_date":"2026-11-04T10:54:05.112534","created_date":"2026-10-31T00:00:00"}