{"id":"https://openalex.org/W4297099949","doi":"https://doi.org/10.1109/mn55117.2022.9887774","title":"A Measurement of Real-world Attack Connections toward Honeypots","display_name":"A Measurement of Real-world Attack Connections toward Honeypots","publication_year":2022,"publication_date":"2022-07-18","ids":{"openalex":"https://openalex.org/W4297099949","doi":"https://doi.org/10.1109/mn55117.2022.9887774"},"language":"en","primary_location":{"id":"doi:10.1109/mn55117.2022.9887774","is_oa":false,"landing_page_url":"https://doi.org/10.1109/mn55117.2022.9887774","pdf_url":null,"source":null,"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"2022 IEEE International Symposium on Measurements & Networking (M&N)","raw_type":"proceedings-article"},"type":"conference-paper","indexed_in":["crossref"],"open_access":{"is_oa":false,"oa_status":"closed","oa_url":null,"any_repository_has_fulltext":false},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5072529110","display_name":"Wuyan Sun","orcid":null},"institutions":[{"id":"https://openalex.org/I69356397","display_name":"Xi\u2019an Jiaotong-Liverpool University","ror":"https://ror.org/03zmrmn05","country_code":"CN","type":"education","lineage":["https://openalex.org/I69356397"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Wuyan Sun","raw_affiliation_strings":["School of Advanced Technology, Xi'an Jiaotong-Liverpool University,Department of Communications and Networking,Suzhou,Jiangsu,P.R.China,215123"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"School of Advanced Technology, Xi'an Jiaotong-Liverpool University,Department of Communications and Networking,Suzhou,Jiangsu,P.R.China,215123","institution_ids":["https://openalex.org/I69356397"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5015205648","display_name":"Chuyang Yuan","orcid":null},"institutions":[{"id":"https://openalex.org/I69356397","display_name":"Xi\u2019an Jiaotong-Liverpool University","ror":"https://ror.org/03zmrmn05","country_code":"CN","type":"education","lineage":["https://openalex.org/I69356397"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Chuyang Yuan","raw_affiliation_strings":["School of Advanced Technology, Xi'an Jiaotong-Liverpool University,Department of Communications and Networking,Suzhou,Jiangsu,P.R.China,215123"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"School of Advanced Technology, Xi'an Jiaotong-Liverpool University,Department of Communications and Networking,Suzhou,Jiangsu,P.R.China,215123","institution_ids":["https://openalex.org/I69356397"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5058487069","display_name":"Wenjun Fan","orcid":"https://orcid.org/0000-0002-7363-9695"},"institutions":[{"id":"https://openalex.org/I69356397","display_name":"Xi\u2019an Jiaotong-Liverpool University","ror":"https://ror.org/03zmrmn05","country_code":"CN","type":"education","lineage":["https://openalex.org/I69356397"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Wenjun Fan","raw_affiliation_strings":["School of Advanced Technology, Xi'an Jiaotong-Liverpool University,Department of Communications and Networking,Suzhou,Jiangsu,P.R.China,215123"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"School of Advanced Technology, Xi'an Jiaotong-Liverpool University,Department of Communications and Networking,Suzhou,Jiangsu,P.R.China,215123","institution_ids":["https://openalex.org/I69356397"]}]}],"institutions":[],"countries_distinct_count":1,"institutions_distinct_count":1,"corresponding_author_ids":[],"corresponding_institution_ids":["https://openalex.org/I69356397"],"apc_list":null,"apc_paid":null,"fwci":null,"has_fulltext":false,"cited_by_count":2,"citation_normalized_percentile":null,"cited_by_percentile_year":null,"biblio":{"volume":"173","issue":null,"first_page":"1","last_page":"6"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T10400","display_name":"Network Security and Intrusion Detection","score":1.0,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T10400","display_name":"Network Security and Intrusion Detection","score":1.0,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11241","display_name":"Advanced Malware Detection Techniques","score":0.9997000098228455,"subfield":{"id":"https://openalex.org/subfields/1711","display_name":"Signal Processing"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T10734","display_name":"Information and Cyber Security","score":0.9991000294685364,"subfield":{"id":"https://openalex.org/subfields/1710","display_name":"Information Systems"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/honeypot","display_name":"Honeypot","score":0.9980137348175049},{"id":"https://openalex.org/keywords/computer-security","display_name":"Computer security","score":0.6361063122749329},{"id":"https://openalex.org/keywords/computer-science","display_name":"Computer science","score":0.5810294151306152},{"id":"https://openalex.org/keywords/fidelity","display_name":"Fidelity","score":0.4505416452884674},{"id":"https://openalex.org/keywords/telecommunications","display_name":"Telecommunications","score":0.13949263095855713}],"concepts":[{"id":"https://openalex.org/C191267431","wikidata":"https://www.wikidata.org/wiki/Q911932","display_name":"Honeypot","level":2,"score":0.9980137348175049},{"id":"https://openalex.org/C38652104","wikidata":"https://www.wikidata.org/wiki/Q3510521","display_name":"Computer security","level":1,"score":0.6361063122749329},{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.5810294151306152},{"id":"https://openalex.org/C2776459999","wikidata":"https://www.wikidata.org/wiki/Q2119376","display_name":"Fidelity","level":2,"score":0.4505416452884674},{"id":"https://openalex.org/C76155785","wikidata":"https://www.wikidata.org/wiki/Q418","display_name":"Telecommunications","level":1,"score":0.13949263095855713}],"mesh":[],"locations_count":1,"locations":[{"id":"doi:10.1109/mn55117.2022.9887774","is_oa":false,"landing_page_url":"https://doi.org/10.1109/mn55117.2022.9887774","pdf_url":null,"source":null,"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"2022 IEEE International Symposium on Measurements & Networking (M&N)","raw_type":"proceedings-article"}],"best_oa_location":null,"sustainable_development_goals":[],"awards":[{"id":"https://openalex.org/G4115898974","display_name":null,"funder_award_id":"TDF21/22-R24-177","funder_id":"https://openalex.org/F4320324032","funder_display_name":"Xi\u2019an Jiaotong-Liverpool University"}],"funders":[{"id":"https://openalex.org/F4320324032","display_name":"Xi\u2019an Jiaotong-Liverpool University","ror":"https://ror.org/03zmrmn05"}],"has_content":{"grobid_xml":false,"pdf":false},"content_urls":null,"referenced_works_count":15,"referenced_works":["https://openalex.org/W1514368868","https://openalex.org/W1602183532","https://openalex.org/W2016565838","https://openalex.org/W2103487196","https://openalex.org/W2108303927","https://openalex.org/W2170196582","https://openalex.org/W2181679282","https://openalex.org/W2607460355","https://openalex.org/W2896303598","https://openalex.org/W2953498285","https://openalex.org/W3018350789","https://openalex.org/W4200475313","https://openalex.org/W6630780968","https://openalex.org/W6635919243","https://openalex.org/W6764791836"],"related_works":["https://openalex.org/W178168142","https://openalex.org/W4232715385","https://openalex.org/W2254955413","https://openalex.org/W2182300180","https://openalex.org/W4316658914","https://openalex.org/W2956011222","https://openalex.org/W2352475565","https://openalex.org/W2742579858","https://openalex.org/W4313484479","https://openalex.org/W4385187164"],"abstract_inverted_index":{"Honeypot":[0],"is":[1,24,51],"a":[2,123],"special":[3],"security":[4],"tool":[5],"created":[6],"for":[7,117,157,173],"enticing":[8],"attackers":[9],"and":[10,21,53,138],"studying":[11],"their":[12],"malicious":[13],"activities.":[14],"The":[15,113],"interaction":[16,34,71],"extent":[17],"between":[18,134],"the":[19,22,29,33,37,44,49,56,70,76,83,86,90,97,109,127,132,135,139,147,153,163,169],"honeypot":[20,45,57,149,165],"attacker":[23,50,154,170],"pre-sumably":[25],"in":[26,73,94,156,171],"compliance":[27],"with":[28],"fidelity":[30,141],"level":[31],"(or":[32],"level)":[35],"of":[36,75,85,96],"honeypot,":[38],"i.e.,":[39,89],"more":[40,54,182],"information":[41],"system":[42],"resource":[43],"provides,":[46],"longer":[47],"term":[48],"sunk,":[52],"activities":[55],"can":[58,151,167,180],"capture.":[59],"However,":[60],"we":[61,121],"found":[62],"that":[63,146],"there":[64],"are":[65],"few":[66],"works":[67],"focusing":[68],"on":[69,105,126,160,177],"extent/duration":[72],"terms":[74],"attack":[77,91,111,136],"connection.":[78],"Therefore,":[79],"this":[80],"paper":[81],"emphasizes":[82],"measurement":[84],"time-related":[87],"property,":[88],"connection":[92],"duration":[93],"light":[95],"honeypot's":[98,140],"interaction-level.":[99],"We":[100,143],"deploy":[101],"different":[102],"interaction-level":[103],"honeypots":[104],"CloudLab":[106],"to":[107,130],"observe":[108],"real-world":[110],"connections.":[112],"data":[114,129],"collection":[115],"continues":[116],"4":[118],"weeks.":[119],"Thereafter,":[120],"apply":[122],"statistical":[124],"analysis":[125],"collected":[128],"verify":[131],"correspondence":[133],"extend":[137],"level.":[142],"figure":[144],"out":[145],"high-interaction":[148],"(HIH)":[150],"make":[152],"trap":[155],"6.51":[158],"seconds":[159,176],"average,":[161],"while":[162],"low-interaction":[164],"(LIH)":[166],"hold":[168],"play":[172],"just":[174],"1.61":[175],"average":[178],"but":[179],"distract":[181],"attackers.":[183]},"counts_by_year":[{"year":2024,"cited_by_count":2}],"updated_date":"2026-07-14T23:27:15.235271","created_date":"2025-10-10T00:00:00"}