{"id":"https://openalex.org/W3045534557","doi":"https://doi.org/10.1109/icc40277.2020.9149314","title":"IoTCMal: Towards A Hybrid IoT Honeypot for Capturing and Analyzing Malware","display_name":"IoTCMal: Towards A Hybrid IoT Honeypot for Capturing and Analyzing Malware","publication_year":2020,"publication_date":"2020-06-01","ids":{"openalex":"https://openalex.org/W3045534557","doi":"https://doi.org/10.1109/icc40277.2020.9149314","mag":"3045534557"},"language":"en","primary_location":{"id":"doi:10.1109/icc40277.2020.9149314","is_oa":false,"landing_page_url":"https://doi.org/10.1109/icc40277.2020.9149314","pdf_url":null,"source":null,"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"ICC 2020 - 2020 IEEE International Conference on Communications (ICC)","raw_type":"proceedings-article"},"type":"conference-paper","indexed_in":["crossref"],"open_access":{"is_oa":false,"oa_status":"closed","oa_url":null,"any_repository_has_fulltext":false},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5032901400","display_name":"Binglai Wang","orcid":null},"institutions":[{"id":"https://openalex.org/I4210165038","display_name":"University of Chinese Academy of Sciences","ror":"https://ror.org/05qbk4x57","country_code":"CN","type":"education","lineage":["https://openalex.org/I19820366","https://openalex.org/I4210165038"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Binglai Wang","raw_affiliation_strings":["School of Cyber Security, University of Chinese Academy of Sciences"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"School of Cyber Security, University of Chinese Academy of Sciences","institution_ids":["https://openalex.org/I4210165038"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5101597434","display_name":"Yu Dou","orcid":"https://orcid.org/0000-0001-7698-6791"},"institutions":[{"id":"https://openalex.org/I4210087772","display_name":"National Computer Network Emergency Response Technical Team/Coordination Center of Chinar","ror":"https://ror.org/00247dh76","country_code":"CN","type":"nonprofit","lineage":["https://openalex.org/I4210087772"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Yu Dou","raw_affiliation_strings":["National Computer Network Emergency Response Technical Team/Coordination Center of China"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"National Computer Network Emergency Response Technical Team/Coordination Center of China","institution_ids":["https://openalex.org/I4210087772"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5080574543","display_name":"Yafei Sang","orcid":null},"institutions":[{"id":"https://openalex.org/I4210165038","display_name":"University of Chinese Academy of Sciences","ror":"https://ror.org/05qbk4x57","country_code":"CN","type":"education","lineage":["https://openalex.org/I19820366","https://openalex.org/I4210165038"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Yafei Sang","raw_affiliation_strings":["School of Cyber Security, University of Chinese Academy of Sciences"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"School of Cyber Security, University of Chinese Academy of Sciences","institution_ids":["https://openalex.org/I4210165038"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5100715816","display_name":"Yongzheng Zhang","orcid":"https://orcid.org/0009-0000-1077-3849"},"institutions":[{"id":"https://openalex.org/I4210165038","display_name":"University of Chinese Academy of Sciences","ror":"https://ror.org/05qbk4x57","country_code":"CN","type":"education","lineage":["https://openalex.org/I19820366","https://openalex.org/I4210165038"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Yongzheng Zhang","raw_affiliation_strings":["School of Cyber Security, University of Chinese Academy of Sciences"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"School of Cyber Security, University of Chinese Academy of Sciences","institution_ids":["https://openalex.org/I4210165038"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5101673488","display_name":"Ji Huang","orcid":"https://orcid.org/0000-0002-0646-4661"},"institutions":[{"id":"https://openalex.org/I4210165038","display_name":"University of Chinese Academy of Sciences","ror":"https://ror.org/05qbk4x57","country_code":"CN","type":"education","lineage":["https://openalex.org/I19820366","https://openalex.org/I4210165038"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Ji Huang","raw_affiliation_strings":["School of Cyber Security, University of Chinese Academy of Sciences"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"School of Cyber Security, University of Chinese Academy of Sciences","institution_ids":["https://openalex.org/I4210165038"]}]}],"institutions":[],"countries_distinct_count":1,"institutions_distinct_count":2,"corresponding_author_ids":[],"corresponding_institution_ids":[],"apc_list":null,"apc_paid":null,"fwci":null,"has_fulltext":false,"cited_by_count":46,"citation_normalized_percentile":null,"cited_by_percentile_year":null,"biblio":{"volume":null,"issue":null,"first_page":"1","last_page":"7"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T10400","display_name":"Network Security and Intrusion Detection","score":1.0,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T10400","display_name":"Network Security and Intrusion Detection","score":1.0,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11241","display_name":"Advanced Malware Detection Techniques","score":0.9998999834060669,"subfield":{"id":"https://openalex.org/subfields/1711","display_name":"Signal Processing"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11598","display_name":"Internet Traffic Analysis and Secure E-voting","score":0.9994000196456909,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/telnet","display_name":"Telnet","score":0.8430757522583008},{"id":"https://openalex.org/keywords/honeypot","display_name":"Honeypot","score":0.8215796947479248},{"id":"https://openalex.org/keywords/computer-science","display_name":"Computer science","score":0.721968412399292},{"id":"https://openalex.org/keywords/malware","display_name":"Malware","score":0.7175560593605042},{"id":"https://openalex.org/keywords/computer-security","display_name":"Computer security","score":0.5832186341285706},{"id":"https://openalex.org/keywords/botnet","display_name":"Botnet","score":0.5812438726425171},{"id":"https://openalex.org/keywords/denial-of-service-attack","display_name":"Denial-of-service attack","score":0.5133382678031921},{"id":"https://openalex.org/keywords/internet-of-things","display_name":"Internet of Things","score":0.4613649249076843},{"id":"https://openalex.org/keywords/authentication","display_name":"Authentication (law)","score":0.4299086928367615},{"id":"https://openalex.org/keywords/the-internet","display_name":"The Internet","score":0.3893055021762848},{"id":"https://openalex.org/keywords/world-wide-web","display_name":"World Wide Web","score":0.3417118787765503},{"id":"https://openalex.org/keywords/computer-network","display_name":"Computer network","score":0.33562660217285156}],"concepts":[{"id":"https://openalex.org/C2776538122","wikidata":"https://www.wikidata.org/wiki/Q160470","display_name":"Telnet","level":4,"score":0.8430757522583008},{"id":"https://openalex.org/C191267431","wikidata":"https://www.wikidata.org/wiki/Q911932","display_name":"Honeypot","level":2,"score":0.8215796947479248},{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.721968412399292},{"id":"https://openalex.org/C541664917","wikidata":"https://www.wikidata.org/wiki/Q14001","display_name":"Malware","level":2,"score":0.7175560593605042},{"id":"https://openalex.org/C38652104","wikidata":"https://www.wikidata.org/wiki/Q3510521","display_name":"Computer security","level":1,"score":0.5832186341285706},{"id":"https://openalex.org/C22735295","wikidata":"https://www.wikidata.org/wiki/Q317671","display_name":"Botnet","level":3,"score":0.5812438726425171},{"id":"https://openalex.org/C38822068","wikidata":"https://www.wikidata.org/wiki/Q131406","display_name":"Denial-of-service attack","level":3,"score":0.5133382678031921},{"id":"https://openalex.org/C81860439","wikidata":"https://www.wikidata.org/wiki/Q251212","display_name":"Internet of Things","level":2,"score":0.4613649249076843},{"id":"https://openalex.org/C148417208","wikidata":"https://www.wikidata.org/wiki/Q4825882","display_name":"Authentication (law)","level":2,"score":0.4299086928367615},{"id":"https://openalex.org/C110875604","wikidata":"https://www.wikidata.org/wiki/Q75","display_name":"The Internet","level":2,"score":0.3893055021762848},{"id":"https://openalex.org/C136764020","wikidata":"https://www.wikidata.org/wiki/Q466","display_name":"World Wide Web","level":1,"score":0.3417118787765503},{"id":"https://openalex.org/C31258907","wikidata":"https://www.wikidata.org/wiki/Q1301371","display_name":"Computer network","level":1,"score":0.33562660217285156},{"id":"https://openalex.org/C169485995","wikidata":"https://www.wikidata.org/wiki/Q42283","display_name":"File Transfer Protocol","level":3,"score":0.0}],"mesh":[],"locations_count":1,"locations":[{"id":"doi:10.1109/icc40277.2020.9149314","is_oa":false,"landing_page_url":"https://doi.org/10.1109/icc40277.2020.9149314","pdf_url":null,"source":null,"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"ICC 2020 - 2020 IEEE International Conference on Communications (ICC)","raw_type":"proceedings-article"}],"best_oa_location":null,"sustainable_development_goals":[{"display_name":"Sustainable cities and communities","id":"https://metadata.un.org/sdg/11","score":0.4099999964237213}],"awards":[],"funders":[],"has_content":{"pdf":false,"grobid_xml":false},"content_urls":null,"referenced_works_count":12,"referenced_works":["https://openalex.org/W1573594453","https://openalex.org/W2148725298","https://openalex.org/W2326454698","https://openalex.org/W2360903897","https://openalex.org/W2579739707","https://openalex.org/W2733765803","https://openalex.org/W2748868501","https://openalex.org/W2774161712","https://openalex.org/W2925118746","https://openalex.org/W2962773292","https://openalex.org/W2970814972","https://openalex.org/W6743493502"],"related_works":["https://openalex.org/W2929621094","https://openalex.org/W1996006176","https://openalex.org/W1522996108","https://openalex.org/W4285325964","https://openalex.org/W2038807247","https://openalex.org/W2292210693","https://openalex.org/W2097156747","https://openalex.org/W2559738661","https://openalex.org/W2147314218","https://openalex.org/W2782717270"],"abstract_inverted_index":{"Nowadays,":[0],"the":[1,6,9,147,180],"emerging":[2],"Internet-of-Things":[3],"(IoT)":[4],"emphasize":[5],"need":[7],"for":[8,53],"security":[10],"of":[11,19,66,116,125,142,164,179],"network-connected":[12],"devices.":[13,62,196],"Additionally,":[14],"there":[15],"are":[16,25,191],"two":[17],"types":[18],"services":[20,32,37],"in":[21,80,101,139,185,194],"IoT":[22,50,61,82,109,195],"devices":[23],"that":[24],"easily":[26],"exploited":[27,36],"by":[28,84,99,159],"attackers,":[29,165],"weak":[30],"authentication":[31],"(e.g.,":[33],"SSH/Telnet)":[34],"and":[35,171],"using":[38],"command":[39],"injection.":[40],"Based":[41],"on":[42,122,131],"this":[43],"observation,":[44],"we":[45,153],"propose":[46],"IoTCMal,":[47,152],"a":[48,73,93],"hybrid":[49],"honeypot":[51],"framework":[52],"capturing":[54],"more":[55],"comprehensive":[56],"malicious":[57,117,126,182],"samples":[58,183],"aiming":[59],"at":[60,160],"The":[63],"key":[64],"novelty":[65],"IoTC-MAL":[67],"is":[68],"three-fold:":[69],"(i)":[70],"it":[71,90],"provides":[72],"high-interactive":[74],"component":[75,95],"with":[76,96],"common":[77],"vulnerable":[78],"service":[79,98],"real":[81],"device":[83],"utilizing":[85],"traffic":[86],"forwarding":[87],"technique;":[88],"(ii)":[89],"also":[91],"contains":[92],"low-interactive":[94,108],"Telnet/SSH":[97],"running":[100],"virtual":[102],"environment.":[103],"(iii)":[104],"Distinct":[105],"from":[106,151],"traditional":[107],"honeypots[1],":[110],"which":[111,166,190],"only":[112],"analyze":[113],"family":[114],"categories":[115],"samples,":[118],"IoTCMal":[119,130],"primarily":[120],"focuses":[121],"homology":[123],"analysis":[124],"samples.":[127],"We":[128],"deployed":[129],"36":[132],"VPS":[133],"<sup":[134],"xmlns:mml=\"http://www.w3.org/1998/Math/MathML\"":[135],"xmlns:xlink=\"http://www.w3.org/1999/xlink\">1</sup>":[136],"instances":[137],"distributed":[138],"13":[140],"cities":[141],"6":[143],"countries.":[144],"By":[145],"analyzing":[146],"malware":[148,156],"binaries":[149],"captured":[150,181],"discover":[154],"8":[155],"families":[157],"controlled":[158],"least":[161],"11":[162],"groups":[163],"mainly":[167],"launched":[168],"DDoS":[169],"attacks":[170],"digital":[172],"currency":[173],"mining.":[174],"Among":[175],"them,":[176],"about":[177],"60%":[178],"ran":[184],"ARM":[186],"or":[187],"MIPs":[188],"architectures,":[189],"widely":[192],"used":[193]},"counts_by_year":[{"year":2026,"cited_by_count":1},{"year":2025,"cited_by_count":7},{"year":2024,"cited_by_count":9},{"year":2023,"cited_by_count":11},{"year":2022,"cited_by_count":14},{"year":2021,"cited_by_count":3},{"year":2020,"cited_by_count":1}],"updated_date":"2026-07-14T23:27:15.235271","created_date":"2025-10-10T00:00:00"}