{"id":"https://openalex.org/W4315630155","doi":"https://doi.org/10.1109/globecom48099.2022.10000682","title":"S-Pot: A Smart Honeypot Framework with Dynamic Rule Configuration for SDN","display_name":"S-Pot: A Smart Honeypot Framework with Dynamic Rule Configuration for SDN","publication_year":2022,"publication_date":"2022-12-04","ids":{"openalex":"https://openalex.org/W4315630155","doi":"https://doi.org/10.1109/globecom48099.2022.10000682"},"language":"en","primary_location":{"id":"doi:10.1109/globecom48099.2022.10000682","is_oa":false,"landing_page_url":"https://doi.org/10.1109/globecom48099.2022.10000682","pdf_url":null,"source":{"id":"https://openalex.org/S4363607705","display_name":"GLOBECOM 2022 - 2022 IEEE Global Communications Conference","issn_l":null,"issn":null,"is_oa":false,"is_in_doaj":false,"is_core":false,"host_organization":null,"host_organization_name":null,"host_organization_lineage":[],"host_organization_lineage_names":[],"type":"conference"},"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"GLOBECOM 2022 - 2022 IEEE Global Communications Conference","raw_type":"proceedings-article"},"type":"article","indexed_in":["crossref"],"open_access":{"is_oa":false,"oa_status":"closed","oa_url":null,"any_repository_has_fulltext":false},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5102924342","display_name":"Javier Franco","orcid":"https://orcid.org/0000-0001-6128-5140"},"institutions":[{"id":"https://openalex.org/I19700959","display_name":"Florida International University","ror":"https://ror.org/02gz6gg07","country_code":"US","type":"education","lineage":["https://openalex.org/I19700959"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Javier Franco","raw_affiliation_strings":["Florida International University,Cyber-Physical Systems Security Lab.,Florida,USA","Cyber-Physical Systems Security Lab., Florida International University, Florida, USA"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Florida International University,Cyber-Physical Systems Security Lab.,Florida,USA","institution_ids":["https://openalex.org/I19700959"]},{"raw_affiliation_string":"Cyber-Physical Systems Security Lab., Florida International University, Florida, USA","institution_ids":["https://openalex.org/I19700959"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5078506948","display_name":"Ahmet Ar\u0131\u015f","orcid":"https://orcid.org/0000-0003-4114-5321"},"institutions":[{"id":"https://openalex.org/I19700959","display_name":"Florida International University","ror":"https://ror.org/02gz6gg07","country_code":"US","type":"education","lineage":["https://openalex.org/I19700959"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Ahmet Aris","raw_affiliation_strings":["Florida International University,Cyber-Physical Systems Security Lab.,Florida,USA","Cyber-Physical Systems Security Lab., Florida International University, Florida, USA"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Florida International University,Cyber-Physical Systems Security Lab.,Florida,USA","institution_ids":["https://openalex.org/I19700959"]},{"raw_affiliation_string":"Cyber-Physical Systems Security Lab., Florida International University, Florida, USA","institution_ids":["https://openalex.org/I19700959"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5085312553","display_name":"Leonardo Babun","orcid":"https://orcid.org/0000-0002-7082-8423"},"institutions":[{"id":"https://openalex.org/I19700959","display_name":"Florida International University","ror":"https://ror.org/02gz6gg07","country_code":"US","type":"education","lineage":["https://openalex.org/I19700959"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Leonardo Babun","raw_affiliation_strings":["Florida International University,Cyber-Physical Systems Security Lab.,Florida,USA","Cyber-Physical Systems Security Lab., Florida International University, Florida, USA"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Florida International University,Cyber-Physical Systems Security Lab.,Florida,USA","institution_ids":["https://openalex.org/I19700959"]},{"raw_affiliation_string":"Cyber-Physical Systems Security Lab., Florida International University, Florida, USA","institution_ids":["https://openalex.org/I19700959"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5019145852","display_name":"A. Selcuk Uluagac","orcid":"https://orcid.org/0000-0002-9823-3464"},"institutions":[{"id":"https://openalex.org/I19700959","display_name":"Florida International University","ror":"https://ror.org/02gz6gg07","country_code":"US","type":"education","lineage":["https://openalex.org/I19700959"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"A. Selcuk Uluagac","raw_affiliation_strings":["Florida International University,Cyber-Physical Systems Security Lab.,Florida,USA","Cyber-Physical Systems Security Lab., Florida International University, Florida, USA"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Florida International University,Cyber-Physical Systems Security Lab.,Florida,USA","institution_ids":["https://openalex.org/I19700959"]},{"raw_affiliation_string":"Cyber-Physical Systems Security Lab., Florida International University, Florida, USA","institution_ids":["https://openalex.org/I19700959"]}]}],"institutions":[],"countries_distinct_count":1,"institutions_distinct_count":4,"corresponding_author_ids":[],"corresponding_institution_ids":[],"apc_list":null,"apc_paid":null,"fwci":2.57,"has_fulltext":false,"cited_by_count":13,"citation_normalized_percentile":{"value":0.92005533,"is_in_top_1_percent":false,"is_in_top_10_percent":true},"cited_by_percentile_year":{"min":90,"max":99},"biblio":{"volume":null,"issue":null,"first_page":"2818","last_page":"2824"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T10400","display_name":"Network Security and Intrusion Detection","score":0.9998999834060669,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T10400","display_name":"Network Security and Intrusion Detection","score":0.9998999834060669,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T10714","display_name":"Software-Defined Networks and 5G","score":0.9998000264167786,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11598","display_name":"Internet Traffic Analysis and Secure E-voting","score":0.9998000264167786,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/honeypot","display_name":"Honeypot","score":0.9391055107116699},{"id":"https://openalex.org/keywords/computer-science","display_name":"Computer science","score":0.8090100288391113},{"id":"https://openalex.org/keywords/software-defined-networking","display_name":"Software-defined networking","score":0.7162597179412842},{"id":"https://openalex.org/keywords/testbed","display_name":"Testbed","score":0.6843239665031433},{"id":"https://openalex.org/keywords/computer-security","display_name":"Computer security","score":0.6516668796539307},{"id":"https://openalex.org/keywords/network-security","display_name":"Network security","score":0.5632399916648865},{"id":"https://openalex.org/keywords/intrusion-detection-system","display_name":"Intrusion detection system","score":0.5274500846862793},{"id":"https://openalex.org/keywords/enterprise-private-network","display_name":"Enterprise private network","score":0.5036033987998962},{"id":"https://openalex.org/keywords/computer-network","display_name":"Computer network","score":0.4093916416168213}],"concepts":[{"id":"https://openalex.org/C191267431","wikidata":"https://www.wikidata.org/wiki/Q911932","display_name":"Honeypot","level":2,"score":0.9391055107116699},{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.8090100288391113},{"id":"https://openalex.org/C77270119","wikidata":"https://www.wikidata.org/wiki/Q1655198","display_name":"Software-defined networking","level":2,"score":0.7162597179412842},{"id":"https://openalex.org/C31395832","wikidata":"https://www.wikidata.org/wiki/Q1318674","display_name":"Testbed","level":2,"score":0.6843239665031433},{"id":"https://openalex.org/C38652104","wikidata":"https://www.wikidata.org/wiki/Q3510521","display_name":"Computer security","level":1,"score":0.6516668796539307},{"id":"https://openalex.org/C182590292","wikidata":"https://www.wikidata.org/wiki/Q989632","display_name":"Network security","level":2,"score":0.5632399916648865},{"id":"https://openalex.org/C35525427","wikidata":"https://www.wikidata.org/wiki/Q745881","display_name":"Intrusion detection system","level":2,"score":0.5274500846862793},{"id":"https://openalex.org/C149859251","wikidata":"https://www.wikidata.org/wiki/Q483426","display_name":"Enterprise private network","level":2,"score":0.5036033987998962},{"id":"https://openalex.org/C31258907","wikidata":"https://www.wikidata.org/wiki/Q1301371","display_name":"Computer network","level":1,"score":0.4093916416168213}],"mesh":[],"locations_count":1,"locations":[{"id":"doi:10.1109/globecom48099.2022.10000682","is_oa":false,"landing_page_url":"https://doi.org/10.1109/globecom48099.2022.10000682","pdf_url":null,"source":{"id":"https://openalex.org/S4363607705","display_name":"GLOBECOM 2022 - 2022 IEEE Global Communications Conference","issn_l":null,"issn":null,"is_oa":false,"is_in_doaj":false,"is_core":false,"host_organization":null,"host_organization_name":null,"host_organization_lineage":[],"host_organization_lineage_names":[],"type":"conference"},"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"GLOBECOM 2022 - 2022 IEEE Global Communications Conference","raw_type":"proceedings-article"}],"best_oa_location":null,"sustainable_development_goals":[{"display_name":"Peace, Justice and strong institutions","score":0.5699999928474426,"id":"https://metadata.un.org/sdg/16"},{"display_name":"Reduced inequalities","score":0.4300000071525574,"id":"https://metadata.un.org/sdg/10"}],"awards":[{"id":"https://openalex.org/G4590927498","display_name":null,"funder_award_id":"1453647,1663051,2219920","funder_id":"https://openalex.org/F4320306076","funder_display_name":"National Science Foundation"}],"funders":[{"id":"https://openalex.org/F4320306076","display_name":"National Science Foundation","ror":"https://ror.org/021nxhr62"}],"has_content":{"pdf":false,"grobid_xml":false},"content_urls":null,"referenced_works_count":24,"referenced_works":["https://openalex.org/W2027448551","https://openalex.org/W2345022687","https://openalex.org/W2582353878","https://openalex.org/W2607460355","https://openalex.org/W2612558585","https://openalex.org/W2766282223","https://openalex.org/W2773478689","https://openalex.org/W2780533491","https://openalex.org/W2782735691","https://openalex.org/W2887191638","https://openalex.org/W2888977251","https://openalex.org/W2891331510","https://openalex.org/W2915905517","https://openalex.org/W2938258273","https://openalex.org/W2945639270","https://openalex.org/W2950558788","https://openalex.org/W2960791616","https://openalex.org/W2969984724","https://openalex.org/W3002257945","https://openalex.org/W3016172990","https://openalex.org/W3021610504","https://openalex.org/W3110277274","https://openalex.org/W3161694586","https://openalex.org/W3195892385"],"related_works":["https://openalex.org/W2946459054","https://openalex.org/W2361650029","https://openalex.org/W2158220440","https://openalex.org/W1852121458","https://openalex.org/W2352199719","https://openalex.org/W2360075860","https://openalex.org/W2391477130","https://openalex.org/W2353452694","https://openalex.org/W2369414226","https://openalex.org/W1927020458"],"abstract_inverted_index":{"Enterprise":[0],"networks":[1,244],"are":[2],"becoming":[3],"increasingly":[4],"heterogeneous":[5],"where":[6],"enterprise":[7,109,121,222],"devices":[8,11],"and":[9,18,39,42,74,95,104,122,134,156,256],"IoT":[10,123],"coexist,":[12],"requiring":[13],"tools":[14],"for":[15],"effective":[16],"management":[17],"security.":[19,78],"Software":[20],"Defined":[21],"Networking":[22],"(SDN)":[23,76],"has":[24,66],"emerged":[25],"in":[26,189,216],"response":[27],"to":[28,49,89,125,179,231],"such":[29],"needs":[30],"of":[31,59,107,139,161,187,214,220,241],"modern":[32],"networks.":[33],"SDN":[34,51,163,223,243],"lacks":[35],"adequate":[36],"security":[37,106,219,240],"features":[38],"Intrusion":[40],"Detection":[41],"Protection":[43],"Systems":[44],"(IDPS)":[45],"have":[46,56],"been":[47],"used":[48],"protect":[50],"from":[52,93,97,129,151],"attacks.":[53,62],"However,":[54,79],"they":[55],"limited":[57],"knowledge":[58],"zero":[60],"day":[61],"Machine":[63],"Learning":[64],"(ML)":[65],"become":[67],"a":[68],"valuable":[69],"tool":[70],"against":[71],"these":[72,102],"limitations":[73],"improve":[75,105,238],"network":[77],"the":[80,137,152,158,170,181,212,218,232,239,242,259],"solutions":[81],"that":[82,197],"solely":[83],"rely":[84],"on":[85],"ML":[86,132,174,194],"can":[87,149,168,177,199,237],"struggle":[88],"discriminate":[90],"benign":[91],"traffic":[92,155],"malicious,":[94],"suffer":[96],"false":[98,159,182],"negatives.":[99,183],"To":[100],"solve":[101],"problems":[103],"SDN-based":[108],"networks,":[110],"we":[111,210],"propose":[112],"S-Pot,":[113],"an":[114,162,221],"open-source":[115],"smart":[116],"honeypot":[117],"framework.":[118],"S-Pot":[119,148,167,188,215,234,236],"uses":[120],"honeypots":[124,142],"attract":[126],"attackers,":[127],"learns":[128],"attacks":[130,172,191,201,247],"via":[131],"classifiers,":[133,175],"dynamically":[135,257],"configures":[136],"rules":[138],"SDN.":[140],"Since":[141],"generally":[143],"receive":[144],"only":[145],"malicious":[146,154],"traffic,":[147],"learn":[150],"received":[153],"minimize":[157,180],"positives":[160],"network.":[164,225,260],"In":[165,208],"addition,":[166,209],"detect":[169,200],"new":[171],"using":[173,192,205],"thus":[176],"help":[178],"Our":[184,226],"performance":[185],"evaluation":[186],"detecting":[190,246],"various":[193],"classifiers":[195],"show":[196],"it":[198],"with":[202,248],"97%":[203],"accuracy":[204],"J48":[206],"algorithm.":[207],"evaluated":[211],"effectiveness":[213],"improving":[217],"testbed":[224],"results":[227],"demonstrate":[228],"that,":[229],"compared":[230],"without":[233],"case,":[235],"by":[245],"better":[249],"performance,":[250],"greater":[251],"accuracy,":[252],"effectively":[253],"generating":[254],"rules,":[255],"configuring":[258]},"counts_by_year":[{"year":2026,"cited_by_count":1},{"year":2025,"cited_by_count":7},{"year":2024,"cited_by_count":4},{"year":2023,"cited_by_count":1}],"updated_date":"2026-06-11T09:08:48.828518","created_date":"2025-10-10T00:00:00"}
