{"id":"https://openalex.org/W2735065902","doi":"https://doi.org/10.1109/tcss.2017.2719705","title":"Creation and Management of Social Network Honeypots for Detecting Targeted Cyber Attacks","display_name":"Creation and Management of Social Network Honeypots for Detecting Targeted Cyber Attacks","publication_year":2017,"publication_date":"2017-07-14","ids":{"openalex":"https://openalex.org/W2735065902","doi":"https://doi.org/10.1109/tcss.2017.2719705","mag":"2735065902"},"language":"en","primary_location":{"id":"doi:10.1109/tcss.2017.2719705","is_oa":false,"landing_page_url":"https://doi.org/10.1109/tcss.2017.2719705","pdf_url":null,"source":{"id":"https://openalex.org/S2490693980","display_name":"IEEE Transactions on Computational Social Systems","issn_l":"2329-924X","issn":["2329-924X","2373-7476"],"is_oa":false,"is_in_doaj":false,"is_core":true,"host_organization":"https://openalex.org/P4310319808","host_organization_name":"Institute of Electrical and Electronics Engineers","host_organization_lineage":["https://openalex.org/P4310319808"],"host_organization_lineage_names":["Institute of Electrical and Electronics Engineers"],"type":"journal"},"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"IEEE Transactions on Computational Social Systems","raw_type":"journal-article"},"type":"article","indexed_in":["crossref"],"open_access":{"is_oa":false,"oa_status":"closed","oa_url":null,"any_repository_has_fulltext":false},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5017505491","display_name":"Abigail Paradise","orcid":"https://orcid.org/0000-0002-5593-3778"},"institutions":[{"id":"https://openalex.org/I124227911","display_name":"Ben-Gurion University of the Negev","ror":"https://ror.org/05tkyf982","country_code":"IL","type":"education","lineage":["https://openalex.org/I124227911"]}],"countries":["IL"],"is_corresponding":false,"raw_author_name":"Abigail Paradise","raw_affiliation_strings":["Department of Software and Information Systems Engineering, Ben-Gurion University of the Negev, Beer-Sheva, Israel"],"raw_orcid":"https://orcid.org/0000-0002-5593-3778","affiliations":[{"raw_affiliation_string":"Department of Software and Information Systems Engineering, Ben-Gurion University of the Negev, Beer-Sheva, Israel","institution_ids":["https://openalex.org/I124227911"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5002391103","display_name":"Asaf Shabtai","orcid":"https://orcid.org/0000-0003-0630-4059"},"institutions":[{"id":"https://openalex.org/I124227911","display_name":"Ben-Gurion University of the Negev","ror":"https://ror.org/05tkyf982","country_code":"IL","type":"education","lineage":["https://openalex.org/I124227911"]}],"countries":["IL"],"is_corresponding":false,"raw_author_name":"Asaf Shabtai","raw_affiliation_strings":["Department of Software and Information Systems Engineering, Ben-Gurion University of the Negev, Beer-Sheva, Israel"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Department of Software and Information Systems Engineering, Ben-Gurion University of the Negev, Beer-Sheva, Israel","institution_ids":["https://openalex.org/I124227911"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5059447087","display_name":"Rami Puzis","orcid":"https://orcid.org/0000-0002-7229-3899"},"institutions":[{"id":"https://openalex.org/I124227911","display_name":"Ben-Gurion University of the Negev","ror":"https://ror.org/05tkyf982","country_code":"IL","type":"education","lineage":["https://openalex.org/I124227911"]}],"countries":["IL"],"is_corresponding":false,"raw_author_name":"Rami Puzis","raw_affiliation_strings":["Department of Software and Information Systems Engineering, Ben-Gurion University of the Negev, Beer-Sheva, Israel"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Department of Software and Information Systems Engineering, Ben-Gurion University of the Negev, Beer-Sheva, Israel","institution_ids":["https://openalex.org/I124227911"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5075299708","display_name":"Aviad Elyashar","orcid":"https://orcid.org/0000-0002-0918-0146"},"institutions":[{"id":"https://openalex.org/I124227911","display_name":"Ben-Gurion University of the Negev","ror":"https://ror.org/05tkyf982","country_code":"IL","type":"education","lineage":["https://openalex.org/I124227911"]}],"countries":["IL"],"is_corresponding":false,"raw_author_name":"Aviad Elyashar","raw_affiliation_strings":["Department of Software and Information Systems Engineering, Ben-Gurion University of the Negev, Beer-Sheva, Israel"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Department of Software and Information Systems Engineering, Ben-Gurion University of the Negev, Beer-Sheva, Israel","institution_ids":["https://openalex.org/I124227911"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5072913672","display_name":"Yuval Elovici","orcid":"https://orcid.org/0000-0002-9641-128X"},"institutions":[{"id":"https://openalex.org/I124227911","display_name":"Ben-Gurion University of the Negev","ror":"https://ror.org/05tkyf982","country_code":"IL","type":"education","lineage":["https://openalex.org/I124227911"]}],"countries":["IL"],"is_corresponding":false,"raw_author_name":"Yuval Elovici","raw_affiliation_strings":["Department of Software and Information Systems Engineering, Ben-Gurion University of the Negev, Beer-Sheva, Israel"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Department of Software and Information Systems Engineering, Ben-Gurion University of the Negev, Beer-Sheva, Israel","institution_ids":["https://openalex.org/I124227911"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5028246264","display_name":"Mehran Roshandel","orcid":null},"institutions":[{"id":"https://openalex.org/I4210093367","display_name":"Deutsche Telekom (Germany)","ror":"https://ror.org/00m8prc86","country_code":"DE","type":"company","lineage":["https://openalex.org/I4210093367"]}],"countries":["DE"],"is_corresponding":false,"raw_author_name":"Mehran Roshandel","raw_affiliation_strings":["Deutsche Telekom AG (T-Systems and Telekom Innovation Laboratories), Berlin, Germany"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Deutsche Telekom AG (T-Systems and Telekom Innovation Laboratories), Berlin, Germany","institution_ids":["https://openalex.org/I4210093367"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5049875999","display_name":"Christoph Peylo","orcid":null},"institutions":[{"id":"https://openalex.org/I889804353","display_name":"Robert Bosch (Germany)","ror":"https://ror.org/01fe0jt45","country_code":"DE","type":"company","lineage":["https://openalex.org/I889804353"]}],"countries":["DE"],"is_corresponding":false,"raw_author_name":"Christoph Peylo","raw_affiliation_strings":["Bosch Center for Artificial Intelligence, Renningen, Germany"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Bosch Center for Artificial Intelligence, Renningen, Germany","institution_ids":["https://openalex.org/I889804353"]}]}],"institutions":[],"countries_distinct_count":2,"institutions_distinct_count":3,"corresponding_author_ids":[],"corresponding_institution_ids":[],"apc_list":null,"apc_paid":null,"fwci":5.2589,"has_fulltext":false,"cited_by_count":55,"citation_normalized_percentile":{"value":0.96100124,"is_in_top_1_percent":false,"is_in_top_10_percent":true},"cited_by_percentile_year":{"min":94,"max":99},"biblio":{"volume":"4","issue":"3","first_page":"65","last_page":"79"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T10400","display_name":"Network Security and Intrusion Detection","score":0.9998999834060669,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T10400","display_name":"Network Security and Intrusion Detection","score":0.9998999834060669,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11644","display_name":"Spam and Phishing Detection","score":0.9998999834060669,"subfield":{"id":"https://openalex.org/subfields/1710","display_name":"Information Systems"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11241","display_name":"Advanced Malware Detection Techniques","score":0.9994999766349792,"subfield":{"id":"https://openalex.org/subfields/1711","display_name":"Signal Processing"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/honeypot","display_name":"Honeypot","score":0.9212567210197449},{"id":"https://openalex.org/keywords/computer-security","display_name":"Computer security","score":0.7305949926376343},{"id":"https://openalex.org/keywords/software-deployment","display_name":"Software deployment","score":0.6248660087585449},{"id":"https://openalex.org/keywords/resilience","display_name":"Resilience (materials science)","score":0.5925434231758118},{"id":"https://openalex.org/keywords/social-network","display_name":"Social network (sociolinguistics)","score":0.5861425399780273},{"id":"https://openalex.org/keywords/computer-science","display_name":"Computer science","score":0.568979799747467},{"id":"https://openalex.org/keywords/vulnerability","display_name":"Vulnerability (computing)","score":0.5337226390838623},{"id":"https://openalex.org/keywords/process","display_name":"Process (computing)","score":0.43866801261901855},{"id":"https://openalex.org/keywords/process-management","display_name":"Process management","score":0.3820369839668274},{"id":"https://openalex.org/keywords/social-media","display_name":"Social media","score":0.34190988540649414},{"id":"https://openalex.org/keywords/business","display_name":"Business","score":0.27671706676483154},{"id":"https://openalex.org/keywords/world-wide-web","display_name":"World Wide Web","score":0.25917455554008484}],"concepts":[{"id":"https://openalex.org/C191267431","wikidata":"https://www.wikidata.org/wiki/Q911932","display_name":"Honeypot","level":2,"score":0.9212567210197449},{"id":"https://openalex.org/C38652104","wikidata":"https://www.wikidata.org/wiki/Q3510521","display_name":"Computer security","level":1,"score":0.7305949926376343},{"id":"https://openalex.org/C105339364","wikidata":"https://www.wikidata.org/wiki/Q2297740","display_name":"Software deployment","level":2,"score":0.6248660087585449},{"id":"https://openalex.org/C2779585090","wikidata":"https://www.wikidata.org/wiki/Q3457762","display_name":"Resilience (materials science)","level":2,"score":0.5925434231758118},{"id":"https://openalex.org/C4727928","wikidata":"https://www.wikidata.org/wiki/Q17164759","display_name":"Social network (sociolinguistics)","level":3,"score":0.5861425399780273},{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.568979799747467},{"id":"https://openalex.org/C95713431","wikidata":"https://www.wikidata.org/wiki/Q631425","display_name":"Vulnerability (computing)","level":2,"score":0.5337226390838623},{"id":"https://openalex.org/C98045186","wikidata":"https://www.wikidata.org/wiki/Q205663","display_name":"Process (computing)","level":2,"score":0.43866801261901855},{"id":"https://openalex.org/C195094911","wikidata":"https://www.wikidata.org/wiki/Q14167904","display_name":"Process management","level":1,"score":0.3820369839668274},{"id":"https://openalex.org/C518677369","wikidata":"https://www.wikidata.org/wiki/Q202833","display_name":"Social media","level":2,"score":0.34190988540649414},{"id":"https://openalex.org/C144133560","wikidata":"https://www.wikidata.org/wiki/Q4830453","display_name":"Business","level":0,"score":0.27671706676483154},{"id":"https://openalex.org/C136764020","wikidata":"https://www.wikidata.org/wiki/Q466","display_name":"World Wide Web","level":1,"score":0.25917455554008484},{"id":"https://openalex.org/C121332964","wikidata":"https://www.wikidata.org/wiki/Q413","display_name":"Physics","level":0,"score":0.0},{"id":"https://openalex.org/C111919701","wikidata":"https://www.wikidata.org/wiki/Q9135","display_name":"Operating system","level":1,"score":0.0},{"id":"https://openalex.org/C97355855","wikidata":"https://www.wikidata.org/wiki/Q11473","display_name":"Thermodynamics","level":1,"score":0.0}],"mesh":[],"locations_count":1,"locations":[{"id":"doi:10.1109/tcss.2017.2719705","is_oa":false,"landing_page_url":"https://doi.org/10.1109/tcss.2017.2719705","pdf_url":null,"source":{"id":"https://openalex.org/S2490693980","display_name":"IEEE Transactions on Computational Social Systems","issn_l":"2329-924X","issn":["2329-924X","2373-7476"],"is_oa":false,"is_in_doaj":false,"is_core":true,"host_organization":"https://openalex.org/P4310319808","host_organization_name":"Institute of Electrical and Electronics Engineers","host_organization_lineage":["https://openalex.org/P4310319808"],"host_organization_lineage_names":["Institute of Electrical and Electronics Engineers"],"type":"journal"},"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"IEEE Transactions on Computational Social Systems","raw_type":"journal-article"}],"best_oa_location":null,"sustainable_development_goals":[],"awards":[],"funders":[{"id":"https://openalex.org/F4320308458","display_name":"American Surgical Association Foundation","ror":"https://ror.org/05grbyt82"}],"has_content":{"grobid_xml":false,"pdf":false},"content_urls":null,"referenced_works_count":48,"referenced_works":["https://openalex.org/W99919602","https://openalex.org/W117791341","https://openalex.org/W166336717","https://openalex.org/W176212337","https://openalex.org/W1109422923","https://openalex.org/W1409467178","https://openalex.org/W1510466762","https://openalex.org/W1541350805","https://openalex.org/W1549828508","https://openalex.org/W1551760018","https://openalex.org/W1933110306","https://openalex.org/W1986678144","https://openalex.org/W1992685726","https://openalex.org/W1996802155","https://openalex.org/W2025061077","https://openalex.org/W2033694966","https://openalex.org/W2040608723","https://openalex.org/W2045046806","https://openalex.org/W2045844007","https://openalex.org/W2051681257","https://openalex.org/W2067854076","https://openalex.org/W2076149295","https://openalex.org/W2091361763","https://openalex.org/W2120111750","https://openalex.org/W2124725172","https://openalex.org/W2125490153","https://openalex.org/W2139144138","https://openalex.org/W2150941206","https://openalex.org/W2153083142","https://openalex.org/W2161125296","https://openalex.org/W2161482094","https://openalex.org/W2164441058","https://openalex.org/W2168508162","https://openalex.org/W2289958325","https://openalex.org/W2293098223","https://openalex.org/W2545820541","https://openalex.org/W2949072505","https://openalex.org/W2964110402","https://openalex.org/W3125182500","https://openalex.org/W3189645665","https://openalex.org/W4298252438","https://openalex.org/W6604033094","https://openalex.org/W6604857938","https://openalex.org/W6607169468","https://openalex.org/W6632400314","https://openalex.org/W6633006935","https://openalex.org/W6673148853","https://openalex.org/W6684716366"],"related_works":["https://openalex.org/W2789663798","https://openalex.org/W2375896275","https://openalex.org/W2166943775","https://openalex.org/W1903420481","https://openalex.org/W2158007046","https://openalex.org/W2775236000","https://openalex.org/W2071426633","https://openalex.org/W2349754162","https://openalex.org/W3212927647","https://openalex.org/W4286859165"],"abstract_inverted_index":{"Reconnaissance":[0],"is":[1,30,47,52],"the":[2,41,55,78,83,101,109,117,122,126,144,169],"initial":[3],"and":[4,94,130,148,153,177,180],"essential":[5],"phase":[6],"of":[7,67,75,103,111,125,160,171],"a":[8,63,87,96,104,112,161],"successful":[9],"advanced":[10],"persistent":[11],"threat":[12],"(APT).":[13],"In":[14,58,116,165],"many":[15],"cases,":[16],"attackers":[17],"collect":[18],"information":[19,29],"from":[20],"social":[21,26,68,127,135,146,175,183],"media,":[22],"such":[23,44,86],"as":[24],"professional":[25,174],"networks.":[27,136],"This":[28],"used":[31],"to":[32,39,71],"select":[33],"members":[34],"that":[35,85,156],"can":[36],"be":[37],"exploited":[38],"penetrate":[40],"organization.":[42,115],"Detecting":[43],"reconnaissance":[45,79],"activity":[46],"extremely":[48],"hard":[49],"because":[50],"it":[51],"performed":[53],"outside":[54],"organization":[56],"premises.":[57],"this":[59],"paper,":[60],"we":[61,120,167],"propose":[62],"framework":[64,88],"for":[65],"management":[66],"network":[69,128,147,184],"honeypots":[70,129],"aid":[72],"in":[73,133,173],"detection":[74],"APTs":[76],"at":[77],"phase.":[80],"We":[81],"discuss":[82],"challenges":[84],"faces,":[89],"describe":[90],"its":[91],"main":[92],"components,":[93],"present":[95],"case":[97,118],"study":[98],"based":[99],"on":[100],"results":[102],"field":[105],"trial":[106],"conducted":[107],"with":[108],"cooperation":[110],"large":[113],"European":[114],"study,":[119],"analyze":[121],"deployment":[123],"process":[124],"their":[131,178],"maintenance":[132],"real":[134],"The":[137],"honeypot":[138],"profiles":[139],"were":[140],"successfully":[141],"assimilated":[142],"into":[143],"organizational":[145],"received":[149],"suspicious":[150],"friend":[151],"requests":[152],"mail":[154],"messages":[155],"revealed":[157],"basic":[158],"indications":[159],"potential":[162],"forthcoming":[163],"attack.":[164],"addition,":[166],"explore":[168],"behavior":[170],"employees":[172],"networks,":[176],"resilience":[179],"vulnerability":[181],"toward":[182],"infiltration.":[185]},"counts_by_year":[{"year":2026,"cited_by_count":1},{"year":2024,"cited_by_count":5},{"year":2023,"cited_by_count":6},{"year":2022,"cited_by_count":9},{"year":2021,"cited_by_count":9},{"year":2020,"cited_by_count":8},{"year":2019,"cited_by_count":6},{"year":2018,"cited_by_count":11}],"updated_date":"2025-11-06T03:46:38.306776","created_date":"2025-10-10T00:00:00"}