{"id":"https://openalex.org/W3137055208","doi":"https://doi.org/10.1109/ccwc51732.2021.9376038","title":"Correlation of Cyber Threat Intelligence Data Across Global Honeypots","display_name":"Correlation of Cyber Threat Intelligence Data Across Global Honeypots","publication_year":2021,"publication_date":"2021-01-27","ids":{"openalex":"https://openalex.org/W3137055208","doi":"https://doi.org/10.1109/ccwc51732.2021.9376038","mag":"3137055208"},"language":"en","primary_location":{"id":"doi:10.1109/ccwc51732.2021.9376038","is_oa":false,"landing_page_url":"https://doi.org/10.1109/ccwc51732.2021.9376038","pdf_url":null,"source":null,"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"2021 IEEE 11th Annual Computing and Communication Workshop and Conference (CCWC)","raw_type":"proceedings-article"},"type":"article","indexed_in":["crossref"],"open_access":{"is_oa":false,"oa_status":"closed","oa_url":null,"any_repository_has_fulltext":false},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5073776247","display_name":"Jay Thom","orcid":"https://orcid.org/0000-0001-9035-8767"},"institutions":[{"id":"https://openalex.org/I134113660","display_name":"University of Nevada, Reno","ror":"https://ror.org/01keh0577","country_code":"US","type":"education","lineage":["https://openalex.org/I134113660"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Jay Thom","raw_affiliation_strings":["University of Nevada Reno, Reno, Nevada, USA"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"University of Nevada Reno, Reno, Nevada, USA","institution_ids":["https://openalex.org/I134113660"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5103052785","display_name":"Yash Shah","orcid":"https://orcid.org/0000-0002-6644-0207"},"institutions":[{"id":"https://openalex.org/I134113660","display_name":"University of Nevada, Reno","ror":"https://ror.org/01keh0577","country_code":"US","type":"education","lineage":["https://openalex.org/I134113660"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Yash Shah","raw_affiliation_strings":["University of Nevada Reno, Reno, Nevada, USA"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"University of Nevada Reno, Reno, Nevada, USA","institution_ids":["https://openalex.org/I134113660"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5100748436","display_name":"Shamik Sengupta","orcid":"https://orcid.org/0000-0002-2019-8056"},"institutions":[{"id":"https://openalex.org/I134113660","display_name":"University of Nevada, Reno","ror":"https://ror.org/01keh0577","country_code":"US","type":"education","lineage":["https://openalex.org/I134113660"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Shamik Sengupta","raw_affiliation_strings":["University of Nevada Reno, Reno, Nevada, USA"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"University of Nevada Reno, Reno, Nevada, USA","institution_ids":["https://openalex.org/I134113660"]}]}],"institutions":[],"countries_distinct_count":1,"institutions_distinct_count":1,"corresponding_author_ids":[],"corresponding_institution_ids":["https://openalex.org/I134113660"],"apc_list":null,"apc_paid":null,"fwci":1.823,"has_fulltext":false,"cited_by_count":18,"citation_normalized_percentile":{"value":0.85346915,"is_in_top_1_percent":false,"is_in_top_10_percent":false},"cited_by_percentile_year":{"min":89,"max":98},"biblio":{"volume":null,"issue":null,"first_page":"0766","last_page":"0772"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T10400","display_name":"Network Security and Intrusion Detection","score":1.0,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T10400","display_name":"Network Security and Intrusion Detection","score":1.0,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11241","display_name":"Advanced Malware Detection Techniques","score":0.9994999766349792,"subfield":{"id":"https://openalex.org/subfields/1711","display_name":"Signal Processing"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11598","display_name":"Internet Traffic Analysis and Secure E-voting","score":0.9990000128746033,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/honeypot","display_name":"Honeypot","score":0.9378608465194702},{"id":"https://openalex.org/keywords/computer-science","display_name":"Computer science","score":0.7084245681762695},{"id":"https://openalex.org/keywords/computer-security","display_name":"Computer security","score":0.6449019908905029},{"id":"https://openalex.org/keywords/telnet","display_name":"Telnet","score":0.6248735785484314},{"id":"https://openalex.org/keywords/the-internet","display_name":"The Internet","score":0.6093766093254089},{"id":"https://openalex.org/keywords/file-transfer-protocol","display_name":"File Transfer Protocol","score":0.5675399303436279},{"id":"https://openalex.org/keywords/password","display_name":"Password","score":0.5037516951560974},{"id":"https://openalex.org/keywords/port","display_name":"Port (circuit theory)","score":0.45202162861824036},{"id":"https://openalex.org/keywords/botnet","display_name":"Botnet","score":0.42545557022094727},{"id":"https://openalex.org/keywords/world-wide-web","display_name":"World Wide Web","score":0.21650952100753784},{"id":"https://openalex.org/keywords/engineering","display_name":"Engineering","score":0.11328423023223877}],"concepts":[{"id":"https://openalex.org/C191267431","wikidata":"https://www.wikidata.org/wiki/Q911932","display_name":"Honeypot","level":2,"score":0.9378608465194702},{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.7084245681762695},{"id":"https://openalex.org/C38652104","wikidata":"https://www.wikidata.org/wiki/Q3510521","display_name":"Computer security","level":1,"score":0.6449019908905029},{"id":"https://openalex.org/C2776538122","wikidata":"https://www.wikidata.org/wiki/Q160470","display_name":"Telnet","level":4,"score":0.6248735785484314},{"id":"https://openalex.org/C110875604","wikidata":"https://www.wikidata.org/wiki/Q75","display_name":"The Internet","level":2,"score":0.6093766093254089},{"id":"https://openalex.org/C169485995","wikidata":"https://www.wikidata.org/wiki/Q42283","display_name":"File Transfer Protocol","level":3,"score":0.5675399303436279},{"id":"https://openalex.org/C109297577","wikidata":"https://www.wikidata.org/wiki/Q161157","display_name":"Password","level":2,"score":0.5037516951560974},{"id":"https://openalex.org/C32802771","wikidata":"https://www.wikidata.org/wiki/Q2443617","display_name":"Port (circuit theory)","level":2,"score":0.45202162861824036},{"id":"https://openalex.org/C22735295","wikidata":"https://www.wikidata.org/wiki/Q317671","display_name":"Botnet","level":3,"score":0.42545557022094727},{"id":"https://openalex.org/C136764020","wikidata":"https://www.wikidata.org/wiki/Q466","display_name":"World Wide Web","level":1,"score":0.21650952100753784},{"id":"https://openalex.org/C127413603","wikidata":"https://www.wikidata.org/wiki/Q11023","display_name":"Engineering","level":0,"score":0.11328423023223877},{"id":"https://openalex.org/C119599485","wikidata":"https://www.wikidata.org/wiki/Q43035","display_name":"Electrical engineering","level":1,"score":0.0}],"mesh":[],"locations_count":1,"locations":[{"id":"doi:10.1109/ccwc51732.2021.9376038","is_oa":false,"landing_page_url":"https://doi.org/10.1109/ccwc51732.2021.9376038","pdf_url":null,"source":null,"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"2021 IEEE 11th Annual Computing and Communication Workshop and Conference (CCWC)","raw_type":"proceedings-article"}],"best_oa_location":null,"sustainable_development_goals":[],"awards":[{"id":"https://openalex.org/G8400973345","display_name":"CICI: CE: Implementing CYBEX-P: Helping Organizations to Share with Privacy Preservation","funder_award_id":"1739032","funder_id":"https://openalex.org/F4320306076","funder_display_name":"National Science Foundation"}],"funders":[{"id":"https://openalex.org/F4320306076","display_name":"National Science Foundation","ror":"https://ror.org/021nxhr62"}],"has_content":{"pdf":false,"grobid_xml":false},"content_urls":null,"referenced_works_count":21,"referenced_works":["https://openalex.org/W2103487196","https://openalex.org/W2512166484","https://openalex.org/W2607460355","https://openalex.org/W2766365590","https://openalex.org/W2769267310","https://openalex.org/W2774161712","https://openalex.org/W2888919071","https://openalex.org/W2906808255","https://openalex.org/W2911396201","https://openalex.org/W2972356018","https://openalex.org/W2973801020","https://openalex.org/W2991165597","https://openalex.org/W2993311321","https://openalex.org/W3004403289","https://openalex.org/W3011282767","https://openalex.org/W3018350789","https://openalex.org/W3023436577","https://openalex.org/W3089688333","https://openalex.org/W3097893648","https://openalex.org/W6753896071","https://openalex.org/W6777243448"],"related_works":["https://openalex.org/W2004696930","https://openalex.org/W2782717270","https://openalex.org/W4206239162","https://openalex.org/W1980574554","https://openalex.org/W2330301703","https://openalex.org/W2211739180","https://openalex.org/W2005326558","https://openalex.org/W2015978338","https://openalex.org/W2314132885","https://openalex.org/W2018370880"],"abstract_inverted_index":{"Today's":[0],"global":[1],"network":[2],"is":[3,106,136,152],"filled":[4],"with":[5,18,163],"attackers":[6],"both":[7],"live":[8],"and":[9,14,21,47,63,91,102,113,117,121,126,146,160,197,211,214],"automated":[10],"seeking":[11],"to":[12,33,45,73,89,138,157,207],"identify":[13],"compromise":[15,74],"vulnerable":[16],"devices,":[17],"initial":[19],"scanning":[20],"attack":[22,159,212],"activity":[23,49,65],"occurring":[24],"within":[25],"minutes":[26],"or":[27,61],"even":[28],"seconds":[29],"of":[30,97,128,166,186,204],"being":[31,172],"connected":[32],"the":[34,87,164,170,202],"Internet.":[35],"To":[36],"better":[37],"understand":[38],"these":[39],"events,":[40],"honeypots":[41,81,156],"can":[42,66,191,199,215],"be":[43,67,192],"deployed":[44,83],"monitor":[46,147],"log":[48,134],"by":[50],"simulating":[51],"actual":[52],"Internet":[53],"facing":[54],"services":[55],"such":[56],"as":[57,69,217],"SSH,":[58],"Telnet,":[59],"HTTP,":[60],"FTP,":[62],"malicious":[64,209],"logged":[68],"attempts":[70],"are":[71,82],"made":[72],"them.":[75],"In":[76,131],"this":[77],"study":[78,143],"six":[79],"multi-service":[80],"in":[84,201],"locations":[85],"around":[86],"globe":[88],"collect":[90],"catalog":[92],"traffic":[93,161],"over":[94,182],"a":[95,183,188,218],"period":[96,185],"several":[98],"months":[99],"between":[100],"March":[101],"December,":[103],"2020.":[104],"Analysis":[105],"performed":[107],"on":[108],"various":[109],"characteristics":[110],"including":[111],"source":[112],"destination":[114],"IP":[115],"addresses":[116],"port":[118],"numbers,":[119],"usernames":[120],"passwords":[122],"utilized,":[123],"commands":[124],"executed,":[125],"types":[127],"files":[129],"downloaded.":[130],"addition,":[132],"Cowrie":[133],"data":[135,151,176],"restructured":[137],"observe":[139],"individual":[140],"attacker":[141,195],"sessions,":[142],"command":[144],"sequences,":[145],"tunneling":[148],"activity.":[149],"This":[150],"then":[153],"correlated":[154],"across":[155],"compare":[158],"patterns":[162],"goal":[165],"learning":[167],"more":[168],"about":[169],"tactics":[171],"employed.":[173],"By":[174],"gathering":[175],"gathered":[177],"from":[178],"geographically":[179],"separate":[180],"zones":[181],"long":[184],"time":[187],"greater":[189],"understanding":[190],"developed":[193],"regarding":[194],"intent":[196],"methodology,":[198],"aid":[200],"development":[203],"effective":[205],"approaches":[206],"identifying":[208],"behavior":[210],"sources,":[213],"serve":[216],"cyber-threat":[219],"intelligence":[220],"feed.":[221]},"counts_by_year":[{"year":2026,"cited_by_count":1},{"year":2025,"cited_by_count":5},{"year":2024,"cited_by_count":4},{"year":2023,"cited_by_count":2},{"year":2022,"cited_by_count":5},{"year":2021,"cited_by_count":1}],"updated_date":"2025-11-06T03:46:38.306776","created_date":"2025-10-10T00:00:00"}