{"id":"https://openalex.org/W4231945399","doi":"https://doi.org/10.1145/1095810.1095825","title":"Scalability, fidelity, and containment in the potemkin virtual honeyfarm","display_name":"Scalability, fidelity, and containment in the potemkin virtual honeyfarm","publication_year":2005,"publication_date":"2005-10-20","ids":{"openalex":"https://openalex.org/W4231945399","doi":"https://doi.org/10.1145/1095810.1095825"},"language":"en","primary_location":{"id":"doi:10.1145/1095810.1095825","is_oa":false,"landing_page_url":"https://doi.org/10.1145/1095810.1095825","pdf_url":null,"source":null,"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Proceedings of the twentieth ACM symposium on Operating systems principles","raw_type":"proceedings-article"},"type":"article","indexed_in":["crossref"],"open_access":{"is_oa":false,"oa_status":"closed","oa_url":null,"any_repository_has_fulltext":false},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5000107991","display_name":"Michael Vrable","orcid":null},"institutions":[{"id":"https://openalex.org/I36258959","display_name":"University of California, San Diego","ror":"https://ror.org/0168r3w48","country_code":"US","type":"education","lineage":["https://openalex.org/I36258959"]}],"countries":["US"],"is_corresponding":true,"raw_author_name":"Michael Vrable","raw_affiliation_strings":["University of California, San Diego, CA"],"affiliations":[{"raw_affiliation_string":"University of California, San Diego, CA","institution_ids":["https://openalex.org/I36258959"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5101589605","display_name":"Justin Ma","orcid":"https://orcid.org/0000-0001-9050-3493"},"institutions":[{"id":"https://openalex.org/I36258959","display_name":"University of California, San Diego","ror":"https://ror.org/0168r3w48","country_code":"US","type":"education","lineage":["https://openalex.org/I36258959"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Justin Ma","raw_affiliation_strings":["University of California, San Diego, CA"],"affiliations":[{"raw_affiliation_string":"University of California, San Diego, CA","institution_ids":["https://openalex.org/I36258959"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5105690544","display_name":"Jay Chen","orcid":null},"institutions":[{"id":"https://openalex.org/I36258959","display_name":"University of California, San Diego","ror":"https://ror.org/0168r3w48","country_code":"US","type":"education","lineage":["https://openalex.org/I36258959"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Jay Chen","raw_affiliation_strings":["University of California, San Diego, CA"],"affiliations":[{"raw_affiliation_string":"University of California, San Diego, CA","institution_ids":["https://openalex.org/I36258959"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5020860412","display_name":"David Moore","orcid":"https://orcid.org/0000-0002-5228-3124"},"institutions":[{"id":"https://openalex.org/I36258959","display_name":"University of California, San Diego","ror":"https://ror.org/0168r3w48","country_code":"US","type":"education","lineage":["https://openalex.org/I36258959"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"David Moore","raw_affiliation_strings":["University of California, San Diego, CA"],"affiliations":[{"raw_affiliation_string":"University of California, San Diego, CA","institution_ids":["https://openalex.org/I36258959"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5066452820","display_name":"Erik Vandekieft","orcid":null},"institutions":[{"id":"https://openalex.org/I36258959","display_name":"University of California, San Diego","ror":"https://ror.org/0168r3w48","country_code":"US","type":"education","lineage":["https://openalex.org/I36258959"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Erik Vandekieft","raw_affiliation_strings":["University of California, San Diego, CA"],"affiliations":[{"raw_affiliation_string":"University of California, San Diego, CA","institution_ids":["https://openalex.org/I36258959"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5029890607","display_name":"Alex C. Snoeren","orcid":"https://orcid.org/0000-0001-5679-3888"},"institutions":[{"id":"https://openalex.org/I36258959","display_name":"University of California, San Diego","ror":"https://ror.org/0168r3w48","country_code":"US","type":"education","lineage":["https://openalex.org/I36258959"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Alex C. Snoeren","raw_affiliation_strings":["University of California, San Diego, CA"],"affiliations":[{"raw_affiliation_string":"University of California, San Diego, CA","institution_ids":["https://openalex.org/I36258959"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5081366293","display_name":"Geoffrey M. Voelker","orcid":"https://orcid.org/0000-0003-0865-7499"},"institutions":[{"id":"https://openalex.org/I36258959","display_name":"University of California, San Diego","ror":"https://ror.org/0168r3w48","country_code":"US","type":"education","lineage":["https://openalex.org/I36258959"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Geoffrey M. Voelker","raw_affiliation_strings":["University of California, San Diego, CA"],"affiliations":[{"raw_affiliation_string":"University of California, San Diego, CA","institution_ids":["https://openalex.org/I36258959"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5048394730","display_name":"Stefan Savage","orcid":"https://orcid.org/0000-0001-6617-8029"},"institutions":[{"id":"https://openalex.org/I36258959","display_name":"University of California, San Diego","ror":"https://ror.org/0168r3w48","country_code":"US","type":"education","lineage":["https://openalex.org/I36258959"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Stefan Savage","raw_affiliation_strings":["University of California, San Diego, CA"],"affiliations":[{"raw_affiliation_string":"University of California, San Diego, CA","institution_ids":["https://openalex.org/I36258959"]}]}],"institutions":[],"countries_distinct_count":1,"institutions_distinct_count":8,"corresponding_author_ids":["https://openalex.org/A5000107991"],"corresponding_institution_ids":["https://openalex.org/I36258959"],"apc_list":null,"apc_paid":null,"fwci":10.1224,"has_fulltext":false,"cited_by_count":135,"citation_normalized_percentile":{"value":0.98315177,"is_in_top_1_percent":false,"is_in_top_10_percent":true},"cited_by_percentile_year":{"min":89,"max":99},"biblio":{"volume":null,"issue":null,"first_page":"148","last_page":"162"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T10400","display_name":"Network Security and Intrusion Detection","score":1.0,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T10400","display_name":"Network Security and Intrusion Detection","score":1.0,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11241","display_name":"Advanced Malware Detection Techniques","score":0.9998000264167786,"subfield":{"id":"https://openalex.org/subfields/1711","display_name":"Signal Processing"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T10714","display_name":"Software-Defined Networks and 5G","score":0.9991999864578247,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/honeypot","display_name":"Honeypot","score":0.8329145908355713},{"id":"https://openalex.org/keywords/malware","display_name":"Malware","score":0.7498024702072144},{"id":"https://openalex.org/keywords/computer-science","display_name":"Computer science","score":0.7256068587303162},{"id":"https://openalex.org/keywords/botnet","display_name":"Botnet","score":0.6610669493675232},{"id":"https://openalex.org/keywords/the-internet","display_name":"The Internet","score":0.6325282454490662},{"id":"https://openalex.org/keywords/computer-security","display_name":"Computer security","score":0.6315401792526245},{"id":"https://openalex.org/keywords/scalability","display_name":"Scalability","score":0.6160478591918945},{"id":"https://openalex.org/keywords/server","display_name":"Server","score":0.5155017971992493},{"id":"https://openalex.org/keywords/denial-of-service-attack","display_name":"Denial-of-service attack","score":0.5031911730766296},{"id":"https://openalex.org/keywords/diatreme","display_name":"Diatreme","score":0.4849110245704651},{"id":"https://openalex.org/keywords/phishing","display_name":"Phishing","score":0.47203528881073},{"id":"https://openalex.org/keywords/extortion","display_name":"Extortion","score":0.4595332443714142},{"id":"https://openalex.org/keywords/computer-network","display_name":"Computer network","score":0.2601693272590637},{"id":"https://openalex.org/keywords/world-wide-web","display_name":"World Wide Web","score":0.24650341272354126},{"id":"https://openalex.org/keywords/operating-system","display_name":"Operating system","score":0.207523375749588}],"concepts":[{"id":"https://openalex.org/C191267431","wikidata":"https://www.wikidata.org/wiki/Q911932","display_name":"Honeypot","level":2,"score":0.8329145908355713},{"id":"https://openalex.org/C541664917","wikidata":"https://www.wikidata.org/wiki/Q14001","display_name":"Malware","level":2,"score":0.7498024702072144},{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.7256068587303162},{"id":"https://openalex.org/C22735295","wikidata":"https://www.wikidata.org/wiki/Q317671","display_name":"Botnet","level":3,"score":0.6610669493675232},{"id":"https://openalex.org/C110875604","wikidata":"https://www.wikidata.org/wiki/Q75","display_name":"The Internet","level":2,"score":0.6325282454490662},{"id":"https://openalex.org/C38652104","wikidata":"https://www.wikidata.org/wiki/Q3510521","display_name":"Computer security","level":1,"score":0.6315401792526245},{"id":"https://openalex.org/C48044578","wikidata":"https://www.wikidata.org/wiki/Q727490","display_name":"Scalability","level":2,"score":0.6160478591918945},{"id":"https://openalex.org/C93996380","wikidata":"https://www.wikidata.org/wiki/Q44127","display_name":"Server","level":2,"score":0.5155017971992493},{"id":"https://openalex.org/C38822068","wikidata":"https://www.wikidata.org/wiki/Q131406","display_name":"Denial-of-service attack","level":3,"score":0.5031911730766296},{"id":"https://openalex.org/C207319327","wikidata":"https://www.wikidata.org/wiki/Q41453","display_name":"Diatreme","level":4,"score":0.4849110245704651},{"id":"https://openalex.org/C83860907","wikidata":"https://www.wikidata.org/wiki/Q135005","display_name":"Phishing","level":3,"score":0.47203528881073},{"id":"https://openalex.org/C2779066997","wikidata":"https://www.wikidata.org/wiki/Q6452087","display_name":"Extortion","level":2,"score":0.4595332443714142},{"id":"https://openalex.org/C31258907","wikidata":"https://www.wikidata.org/wiki/Q1301371","display_name":"Computer network","level":1,"score":0.2601693272590637},{"id":"https://openalex.org/C136764020","wikidata":"https://www.wikidata.org/wiki/Q466","display_name":"World Wide Web","level":1,"score":0.24650341272354126},{"id":"https://openalex.org/C111919701","wikidata":"https://www.wikidata.org/wiki/Q9135","display_name":"Operating system","level":1,"score":0.207523375749588},{"id":"https://openalex.org/C86803240","wikidata":"https://www.wikidata.org/wiki/Q420","display_name":"Biology","level":0,"score":0.0},{"id":"https://openalex.org/C67236022","wikidata":"https://www.wikidata.org/wiki/Q4364434","display_name":"Mantle (geology)","level":2,"score":0.0},{"id":"https://openalex.org/C183282558","wikidata":"https://www.wikidata.org/wiki/Q204376","display_name":"Kimberlite","level":3,"score":0.0},{"id":"https://openalex.org/C17744445","wikidata":"https://www.wikidata.org/wiki/Q36442","display_name":"Political science","level":0,"score":0.0},{"id":"https://openalex.org/C199539241","wikidata":"https://www.wikidata.org/wiki/Q7748","display_name":"Law","level":1,"score":0.0},{"id":"https://openalex.org/C151730666","wikidata":"https://www.wikidata.org/wiki/Q7205","display_name":"Paleontology","level":1,"score":0.0}],"mesh":[],"locations_count":1,"locations":[{"id":"doi:10.1145/1095810.1095825","is_oa":false,"landing_page_url":"https://doi.org/10.1145/1095810.1095825","pdf_url":null,"source":null,"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Proceedings of the twentieth ACM symposium on Operating systems principles","raw_type":"proceedings-article"}],"best_oa_location":null,"sustainable_development_goals":[{"score":0.6700000166893005,"id":"https://metadata.un.org/sdg/16","display_name":"Peace, Justice and strong institutions"}],"awards":[],"funders":[],"has_content":{"pdf":false,"grobid_xml":false},"content_urls":null,"referenced_works_count":23,"referenced_works":["https://openalex.org/W198543417","https://openalex.org/W1532313454","https://openalex.org/W1540548505","https://openalex.org/W1971505071","https://openalex.org/W1997269120","https://openalex.org/W2010365467","https://openalex.org/W2031006315","https://openalex.org/W2034887531","https://openalex.org/W2083477206","https://openalex.org/W2102399005","https://openalex.org/W2126058759","https://openalex.org/W2130550456","https://openalex.org/W2158060559","https://openalex.org/W2172024521","https://openalex.org/W2743634147","https://openalex.org/W4232895233","https://openalex.org/W4244704438","https://openalex.org/W4254762831","https://openalex.org/W6630780968","https://openalex.org/W6635716266","https://openalex.org/W6637950457","https://openalex.org/W6638056121","https://openalex.org/W7066491068"],"related_works":["https://openalex.org/W2789663798","https://openalex.org/W2375896275","https://openalex.org/W2166943775","https://openalex.org/W1903420481","https://openalex.org/W2158007046","https://openalex.org/W2775236000","https://openalex.org/W2071426633","https://openalex.org/W2349754162","https://openalex.org/W4253323281","https://openalex.org/W2130329553"],"abstract_inverted_index":{"The":[0],"rapid":[1],"evolution":[2],"of":[3,22,89,98,121,147],"large-scale":[4],"worms,":[5],"viruses":[6],"and":[7,33,80,118],"bot-nets":[8],"have":[9,51,103],"made":[10],"Internet":[11,100,137],"malware":[12,46],"a":[13,60,105,145],"pressing":[14],"concern.":[15],"Such":[16],"infections":[17],"are":[18],"at":[19,59],"the":[20,36,95],"root":[21],"modern":[23],"scourges":[24],"including":[25],"DDoS":[26],"extortion,":[27],"on-line":[28],"identity":[29],"theft,":[30],"SPAM,":[31],"phishing,":[32],"piracy.":[34],"However,":[35],"most":[37],"widely":[38],"used":[39],"tools":[40],"for":[41],"gathering":[42],"intelligence":[43],"on":[44],"new":[45],"--":[47,50],"network":[48],"honeypots":[49,138],"forced":[52],"investigators":[53],"to":[54,76,86,123],"choose":[55],"between":[56],"monitoring":[57],"activity":[58],"large":[61],"scale":[62],"or":[63],"capturing":[64],"behavior":[65,97],"with":[66],"high":[67],"fidelity.":[68],"In":[69],"this":[70,78,125],"paper,":[71],"we":[72],"describe":[73],"an":[74,129],"approach":[75],"minimize":[77],"tension":[79],"improve":[81],"honeypot":[82],"scalability":[83],"by":[84],"up":[85],"six":[87],"orders":[88],"magnitude":[90],"while":[91],"still":[92,128],"closely":[93],"emulating":[94],"execution":[96],"individual":[99],"hosts.":[101],"We":[102],"built":[104],"prototype":[106],"honeyfarm":[107],"system,":[108],"called":[109],"Potemkin,":[110],"that":[111],"exploits":[112],"virtual":[113],"machines,":[114],"aggressive":[115],"memory":[116],"sharing,":[117],"late":[119],"binding":[120],"resources":[122],"achieve":[124],"goal.":[126],"While":[127],"immature":[130],"implementation,":[131],"Potemkin":[132],"has":[133],"emulated":[134],"over":[135],"64,000":[136],"in":[139],"live":[140],"test":[141],"runs,":[142],"using":[143],"only":[144],"handful":[146],"physical":[148],"servers.":[149]},"counts_by_year":[{"year":2025,"cited_by_count":4},{"year":2024,"cited_by_count":3},{"year":2023,"cited_by_count":4},{"year":2022,"cited_by_count":1},{"year":2021,"cited_by_count":3},{"year":2020,"cited_by_count":2},{"year":2019,"cited_by_count":5},{"year":2018,"cited_by_count":3},{"year":2017,"cited_by_count":8},{"year":2016,"cited_by_count":7},{"year":2015,"cited_by_count":3},{"year":2014,"cited_by_count":9},{"year":2013,"cited_by_count":8},{"year":2012,"cited_by_count":4}],"updated_date":"2025-11-06T03:46:38.306776","created_date":"2025-10-10T00:00:00"}