{"id":"https://openalex.org/W3011282767","doi":"https://doi.org/10.1109/ccwc47524.2020.9031234","title":"Analyzing Variation Among IoT Botnets Using Medium Interaction Honeypots","display_name":"Analyzing Variation Among IoT Botnets Using Medium Interaction Honeypots","publication_year":2020,"publication_date":"2020-01-01","ids":{"openalex":"https://openalex.org/W3011282767","doi":"https://doi.org/10.1109/ccwc47524.2020.9031234","mag":"3011282767"},"language":"en","primary_location":{"id":"doi:10.1109/ccwc47524.2020.9031234","is_oa":false,"landing_page_url":"https://doi.org/10.1109/ccwc47524.2020.9031234","pdf_url":null,"source":{"id":"https://openalex.org/S4306498584","display_name":"2020 10th Annual Computing and Communication Workshop and Conference (CCWC)","issn_l":null,"issn":null,"is_oa":false,"is_in_doaj":false,"is_core":false,"host_organization":null,"host_organization_name":null,"host_organization_lineage":[],"host_organization_lineage_names":[],"type":"conference"},"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"2020 10th Annual Computing and Communication Workshop and Conference (CCWC)","raw_type":"proceedings-article"},"type":"article","indexed_in":["crossref"],"open_access":{"is_oa":false,"oa_status":"closed","oa_url":null,"any_repository_has_fulltext":false},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5005981022","display_name":"Bryson Lingenfelter","orcid":null},"institutions":[{"id":"https://openalex.org/I134113660","display_name":"University of Nevada, Reno","ror":"https://ror.org/01keh0577","country_code":"US","type":"education","lineage":["https://openalex.org/I134113660"]}],"countries":["US"],"is_corresponding":true,"raw_author_name":"Bryson Lingenfelter","raw_affiliation_strings":["Dept. of Computer Science and Eng., University of Nevada, Reno, Reno, USA"],"affiliations":[{"raw_affiliation_string":"Dept. of Computer Science and Eng., University of Nevada, Reno, Reno, USA","institution_ids":["https://openalex.org/I134113660"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5008183355","display_name":"Iman Vakilinia","orcid":"https://orcid.org/0000-0003-3015-2518"},"institutions":[{"id":"https://openalex.org/I11874761","display_name":"University of North Florida","ror":"https://ror.org/01j903a45","country_code":"US","type":"education","lineage":["https://openalex.org/I11874761"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Iman Vakilinia","raw_affiliation_strings":["School of Computing, University of North Florida, Jacksonville, USA"],"affiliations":[{"raw_affiliation_string":"School of Computing, University of North Florida, Jacksonville, USA","institution_ids":["https://openalex.org/I11874761"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5100748436","display_name":"Shamik Sengupta","orcid":"https://orcid.org/0000-0002-2019-8056"},"institutions":[{"id":"https://openalex.org/I134113660","display_name":"University of Nevada, Reno","ror":"https://ror.org/01keh0577","country_code":"US","type":"education","lineage":["https://openalex.org/I134113660"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Shamik Sengupta","raw_affiliation_strings":["Dept. of Computer Science and Eng., University of Nevada, Reno, Reno, USA"],"affiliations":[{"raw_affiliation_string":"Dept. of Computer Science and Eng., University of Nevada, Reno, Reno, USA","institution_ids":["https://openalex.org/I134113660"]}]}],"institutions":[],"countries_distinct_count":1,"institutions_distinct_count":3,"corresponding_author_ids":["https://openalex.org/A5005981022"],"corresponding_institution_ids":["https://openalex.org/I134113660"],"apc_list":null,"apc_paid":null,"fwci":3.6101,"has_fulltext":false,"cited_by_count":21,"citation_normalized_percentile":{"value":0.93672693,"is_in_top_1_percent":false,"is_in_top_10_percent":true},"cited_by_percentile_year":{"min":89,"max":99},"biblio":{"volume":null,"issue":null,"first_page":"0761","last_page":"0767"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T10400","display_name":"Network Security and Intrusion Detection","score":1.0,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T10400","display_name":"Network Security and Intrusion Detection","score":1.0,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11241","display_name":"Advanced Malware Detection Techniques","score":0.9998999834060669,"subfield":{"id":"https://openalex.org/subfields/1711","display_name":"Signal Processing"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11598","display_name":"Internet Traffic Analysis and Secure E-voting","score":0.9998000264167786,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/honeypot","display_name":"Honeypot","score":0.9758290648460388},{"id":"https://openalex.org/keywords/botnet","display_name":"Botnet","score":0.9304023385047913},{"id":"https://openalex.org/keywords/malware","display_name":"Malware","score":0.8191761374473572},{"id":"https://openalex.org/keywords/computer-science","display_name":"Computer science","score":0.7055221796035767},{"id":"https://openalex.org/keywords/computer-security","display_name":"Computer security","score":0.5671159625053406},{"id":"https://openalex.org/keywords/hacker","display_name":"Hacker","score":0.48411524295806885},{"id":"https://openalex.org/keywords/denial-of-service-attack","display_name":"Denial-of-service attack","score":0.46430376172065735},{"id":"https://openalex.org/keywords/software","display_name":"Software","score":0.44380003213882446},{"id":"https://openalex.org/keywords/trojan","display_name":"Trojan","score":0.4406380355358124},{"id":"https://openalex.org/keywords/password","display_name":"Password","score":0.41033533215522766},{"id":"https://openalex.org/keywords/operating-system","display_name":"Operating system","score":0.25433677434921265},{"id":"https://openalex.org/keywords/the-internet","display_name":"The Internet","score":0.20513597130775452}],"concepts":[{"id":"https://openalex.org/C191267431","wikidata":"https://www.wikidata.org/wiki/Q911932","display_name":"Honeypot","level":2,"score":0.9758290648460388},{"id":"https://openalex.org/C22735295","wikidata":"https://www.wikidata.org/wiki/Q317671","display_name":"Botnet","level":3,"score":0.9304023385047913},{"id":"https://openalex.org/C541664917","wikidata":"https://www.wikidata.org/wiki/Q14001","display_name":"Malware","level":2,"score":0.8191761374473572},{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.7055221796035767},{"id":"https://openalex.org/C38652104","wikidata":"https://www.wikidata.org/wiki/Q3510521","display_name":"Computer security","level":1,"score":0.5671159625053406},{"id":"https://openalex.org/C86844869","wikidata":"https://www.wikidata.org/wiki/Q2798820","display_name":"Hacker","level":2,"score":0.48411524295806885},{"id":"https://openalex.org/C38822068","wikidata":"https://www.wikidata.org/wiki/Q131406","display_name":"Denial-of-service attack","level":3,"score":0.46430376172065735},{"id":"https://openalex.org/C2777904410","wikidata":"https://www.wikidata.org/wiki/Q7397","display_name":"Software","level":2,"score":0.44380003213882446},{"id":"https://openalex.org/C174333608","wikidata":"https://www.wikidata.org/wiki/Q19635","display_name":"Trojan","level":2,"score":0.4406380355358124},{"id":"https://openalex.org/C109297577","wikidata":"https://www.wikidata.org/wiki/Q161157","display_name":"Password","level":2,"score":0.41033533215522766},{"id":"https://openalex.org/C111919701","wikidata":"https://www.wikidata.org/wiki/Q9135","display_name":"Operating system","level":1,"score":0.25433677434921265},{"id":"https://openalex.org/C110875604","wikidata":"https://www.wikidata.org/wiki/Q75","display_name":"The Internet","level":2,"score":0.20513597130775452}],"mesh":[],"locations_count":1,"locations":[{"id":"doi:10.1109/ccwc47524.2020.9031234","is_oa":false,"landing_page_url":"https://doi.org/10.1109/ccwc47524.2020.9031234","pdf_url":null,"source":{"id":"https://openalex.org/S4306498584","display_name":"2020 10th Annual Computing and Communication Workshop and Conference (CCWC)","issn_l":null,"issn":null,"is_oa":false,"is_in_doaj":false,"is_core":false,"host_organization":null,"host_organization_name":null,"host_organization_lineage":[],"host_organization_lineage_names":[],"type":"conference"},"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"2020 10th Annual Computing and Communication Workshop and Conference (CCWC)","raw_type":"proceedings-article"}],"best_oa_location":null,"sustainable_development_goals":[],"awards":[],"funders":[],"has_content":{"pdf":false,"grobid_xml":false},"content_urls":null,"referenced_works_count":16,"referenced_works":["https://openalex.org/W1612920240","https://openalex.org/W1981033991","https://openalex.org/W2103487196","https://openalex.org/W2148725298","https://openalex.org/W2168154523","https://openalex.org/W2172607710","https://openalex.org/W2512166484","https://openalex.org/W2733765803","https://openalex.org/W2748868501","https://openalex.org/W2766365590","https://openalex.org/W2774161712","https://openalex.org/W2906808255","https://openalex.org/W6636329008","https://openalex.org/W6685286602","https://openalex.org/W6725194215","https://openalex.org/W6743493502"],"related_works":["https://openalex.org/W2362574935","https://openalex.org/W1926248","https://openalex.org/W3118687971","https://openalex.org/W2363507101","https://openalex.org/W3159372857","https://openalex.org/W4320401378","https://openalex.org/W1517527854","https://openalex.org/W776729438","https://openalex.org/W2147767253","https://openalex.org/W2038807247"],"abstract_inverted_index":{"Through":[0],"analysis":[1],"of":[2,28,58,82,129],"sessions":[3,51,67],"in":[4],"which":[5,68],"files":[6],"were":[7],"created":[8],"and":[9,41,104],"downloaded":[10],"on":[11,30],"three":[12],"Cowrie":[13],"SSH/Telnet":[14],"honeypots,":[15,63],"we":[16],"find":[17,111],"that":[18,90,112,144],"IoT":[19,59],"botnets":[20,60],"are":[21,75],"by":[22,106],"far":[23],"the":[24,65,73,91,96,113,124,127,139],"most":[25],"common":[26,84],"source":[27],"malware":[29,121],"connected":[31],"systems":[32],"with":[33],"weak":[34],"credentials.":[35],"We":[36,109,142],"detail":[37],"our":[38,62],"honeypot":[39,74,125],"configuration":[40],"describe":[42],"a":[43,130],"simple":[44],"method":[45],"for":[46],"listing":[47],"near-identical":[48],"malicious":[49,66],"login":[50],"using":[52,155],"edit":[53],"distance.":[54],"A":[55],"large":[56],"number":[57],"attack":[61,85],"but":[64,100,150],"download":[69],"botnet":[70,98,120,136],"software":[71],"to":[72,80,123,147],"almost":[76],"all":[77],"nearly":[78],"identical":[79],"one":[81],"two":[83],"patterns.":[86],"It":[87],"is":[88,94],"apparent":[89],"Mirai":[92,145],"worm":[93],"still":[95],"dominant":[97],"software,":[99],"has":[101],"been":[102],"expanded":[103],"modified":[105],"other":[107],"hackers.":[108],"also":[110],"same":[114,140],"loader":[115],"devices":[116],"deploy":[117],"several":[118],"different":[119],"strains":[122],"over":[126],"course":[128],"40":[131],"day":[132],"period,":[133],"suggesting":[134],"multiple":[135],"deployments":[137],"from":[138],"source.":[141],"conclude":[143],"continues":[146],"be":[148,152],"adapted":[149],"can":[151],"effectively":[153],"tracked":[154],"medium":[156],"interaction":[157],"honeypots":[158],"such":[159],"as":[160],"Cowrie.":[161]},"counts_by_year":[{"year":2025,"cited_by_count":7},{"year":2024,"cited_by_count":1},{"year":2023,"cited_by_count":5},{"year":2022,"cited_by_count":1},{"year":2021,"cited_by_count":7}],"updated_date":"2025-11-06T03:46:38.306776","created_date":"2025-10-10T00:00:00"}
