{"id":"https://openalex.org/W2025063134","doi":"https://doi.org/10.1145/2459976.2460014","title":"Machine-oriented biometrics and cocooning for dynamic network defense","display_name":"Machine-oriented biometrics and cocooning for dynamic network defense","publication_year":2013,"publication_date":"2013-01-08","ids":{"openalex":"https://openalex.org/W2025063134","doi":"https://doi.org/10.1145/2459976.2460014","mag":"2025063134"},"language":"en","primary_location":{"id":"doi:10.1145/2459976.2460014","is_oa":false,"landing_page_url":"https://doi.org/10.1145/2459976.2460014","pdf_url":null,"source":null,"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Proceedings of the Eighth Annual Cyber Security and Information Intelligence Research Workshop","raw_type":"proceedings-article"},"type":"conference-paper","indexed_in":["crossref"],"open_access":{"is_oa":false,"oa_status":"closed","oa_url":null,"any_repository_has_fulltext":false},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5110203364","display_name":"Jason J. Haas","orcid":null},"institutions":[{"id":"https://openalex.org/I4210104735","display_name":"Sandia National Laboratories","ror":"https://ror.org/01apwpt12","country_code":"US","type":"facility","lineage":["https://openalex.org/I1330989302","https://openalex.org/I198811213","https://openalex.org/I4210104735"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Jason J. Haas","raw_affiliation_strings":["Sandia National Laboratories, Albuquerque, NM"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Sandia National Laboratories, Albuquerque, NM","institution_ids":["https://openalex.org/I4210104735"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5111510653","display_name":"Justin Doak","orcid":null},"institutions":[{"id":"https://openalex.org/I4210104735","display_name":"Sandia National Laboratories","ror":"https://ror.org/01apwpt12","country_code":"US","type":"facility","lineage":["https://openalex.org/I1330989302","https://openalex.org/I198811213","https://openalex.org/I4210104735"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"J. D. Doak","raw_affiliation_strings":["Sandia National Laboratories, Albuquerque, NM"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Sandia National Laboratories, Albuquerque, NM","institution_ids":["https://openalex.org/I4210104735"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5027940565","display_name":"Jason Hamlet","orcid":null},"institutions":[{"id":"https://openalex.org/I4210104735","display_name":"Sandia National Laboratories","ror":"https://ror.org/01apwpt12","country_code":"US","type":"facility","lineage":["https://openalex.org/I1330989302","https://openalex.org/I198811213","https://openalex.org/I4210104735"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Jason R. Hamlet","raw_affiliation_strings":["Sandia National Laboratories, Albuquerque, NM"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Sandia National Laboratories, Albuquerque, NM","institution_ids":["https://openalex.org/I4210104735"]}]}],"institutions":[],"countries_distinct_count":1,"institutions_distinct_count":1,"corresponding_author_ids":[],"corresponding_institution_ids":["https://openalex.org/I4210104735"],"apc_list":null,"apc_paid":null,"fwci":null,"has_fulltext":false,"cited_by_count":1,"citation_normalized_percentile":null,"cited_by_percentile_year":null,"biblio":{"volume":null,"issue":null,"first_page":"1","last_page":"4"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T10400","display_name":"Network Security and Intrusion Detection","score":0.9998999834060669,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T10400","display_name":"Network Security and Intrusion Detection","score":0.9998999834060669,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11241","display_name":"Advanced Malware Detection Techniques","score":0.9998000264167786,"subfield":{"id":"https://openalex.org/subfields/1711","display_name":"Signal Processing"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T10734","display_name":"Information and Cyber Security","score":0.9997000098228455,"subfield":{"id":"https://openalex.org/subfields/1710","display_name":"Information Systems"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/computer-science","display_name":"Computer science","score":0.7045629024505615},{"id":"https://openalex.org/keywords/compromise","display_name":"Compromise","score":0.6742863655090332},{"id":"https://openalex.org/keywords/computer-security","display_name":"Computer security","score":0.6112545728683472},{"id":"https://openalex.org/keywords/process","display_name":"Process (computing)","score":0.5321333408355713},{"id":"https://openalex.org/keywords/intrusion","display_name":"Intrusion","score":0.42834970355033875},{"id":"https://openalex.org/keywords/intrusion-detection-system","display_name":"Intrusion detection system","score":0.42669016122817993},{"id":"https://openalex.org/keywords/biometrics","display_name":"Biometrics","score":0.4206295907497406},{"id":"https://openalex.org/keywords/duality","display_name":"Duality (order theory)","score":0.4122946858406067},{"id":"https://openalex.org/keywords/operating-system","display_name":"Operating system","score":0.2438136637210846}],"concepts":[{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.7045629024505615},{"id":"https://openalex.org/C46355384","wikidata":"https://www.wikidata.org/wiki/Q726686","display_name":"Compromise","level":2,"score":0.6742863655090332},{"id":"https://openalex.org/C38652104","wikidata":"https://www.wikidata.org/wiki/Q3510521","display_name":"Computer security","level":1,"score":0.6112545728683472},{"id":"https://openalex.org/C98045186","wikidata":"https://www.wikidata.org/wiki/Q205663","display_name":"Process (computing)","level":2,"score":0.5321333408355713},{"id":"https://openalex.org/C158251709","wikidata":"https://www.wikidata.org/wiki/Q354025","display_name":"Intrusion","level":2,"score":0.42834970355033875},{"id":"https://openalex.org/C35525427","wikidata":"https://www.wikidata.org/wiki/Q745881","display_name":"Intrusion detection system","level":2,"score":0.42669016122817993},{"id":"https://openalex.org/C184297639","wikidata":"https://www.wikidata.org/wiki/Q177765","display_name":"Biometrics","level":2,"score":0.4206295907497406},{"id":"https://openalex.org/C2778023678","wikidata":"https://www.wikidata.org/wiki/Q554403","display_name":"Duality (order theory)","level":2,"score":0.4122946858406067},{"id":"https://openalex.org/C111919701","wikidata":"https://www.wikidata.org/wiki/Q9135","display_name":"Operating system","level":1,"score":0.2438136637210846},{"id":"https://openalex.org/C118615104","wikidata":"https://www.wikidata.org/wiki/Q121416","display_name":"Discrete mathematics","level":1,"score":0.0},{"id":"https://openalex.org/C36289849","wikidata":"https://www.wikidata.org/wiki/Q34749","display_name":"Social science","level":1,"score":0.0},{"id":"https://openalex.org/C17409809","wikidata":"https://www.wikidata.org/wiki/Q161764","display_name":"Geochemistry","level":1,"score":0.0},{"id":"https://openalex.org/C127313418","wikidata":"https://www.wikidata.org/wiki/Q1069","display_name":"Geology","level":0,"score":0.0},{"id":"https://openalex.org/C33923547","wikidata":"https://www.wikidata.org/wiki/Q395","display_name":"Mathematics","level":0,"score":0.0},{"id":"https://openalex.org/C144024400","wikidata":"https://www.wikidata.org/wiki/Q21201","display_name":"Sociology","level":0,"score":0.0}],"mesh":[],"locations_count":1,"locations":[{"id":"doi:10.1145/2459976.2460014","is_oa":false,"landing_page_url":"https://doi.org/10.1145/2459976.2460014","pdf_url":null,"source":null,"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Proceedings of the Eighth Annual Cyber Security and Information Intelligence Research Workshop","raw_type":"proceedings-article"}],"best_oa_location":null,"sustainable_development_goals":[{"display_name":"Peace, Justice and strong institutions","score":0.8199999928474426,"id":"https://metadata.un.org/sdg/16"}],"awards":[],"funders":[],"has_content":{"grobid_xml":false,"pdf":false},"content_urls":null,"referenced_works_count":11,"referenced_works":["https://openalex.org/W47128722","https://openalex.org/W1514368868","https://openalex.org/W1594536929","https://openalex.org/W1985987493","https://openalex.org/W2029418637","https://openalex.org/W2099734055","https://openalex.org/W2116065364","https://openalex.org/W2122646361","https://openalex.org/W2128217000","https://openalex.org/W2129860818","https://openalex.org/W2161784403"],"related_works":["https://openalex.org/W2801622120","https://openalex.org/W2164141394","https://openalex.org/W4240977217","https://openalex.org/W3036524962","https://openalex.org/W2508088450","https://openalex.org/W2389434635","https://openalex.org/W4214750239","https://openalex.org/W2279908259","https://openalex.org/W2025641871","https://openalex.org/W2133389611"],"abstract_inverted_index":{"Current":[0],"cyber":[1],"defenses":[2],"result":[3,39],"in":[4,81],"binary":[5],"access":[6,19],"for":[7],"attackers":[8],"who":[9],"have":[10],"compromised":[11],"a":[12,47,98],"host:":[13],"either":[14,52],"the":[15,21,24,29,34,38,82,136],"attacker":[16],"has":[17],"full":[18],"to":[20,78,92,115,123],"machine":[22,30,99],"or":[23,55],"intrusion":[25],"is":[26,31,37,49,54,57],"detected":[27],"and":[28,70,131],"removed":[32],"from":[33,112],"network.":[35],"This":[36],"of":[40,68,90,97],"an":[41,128],"apparent":[42],"duality":[43],"when":[44],"determining":[45],"if":[46],"system":[48],"compromised;":[50],"i.e.,":[51],"it":[53,56],"not.":[58],"However,":[59],"analysts":[60],"usually":[61],"make":[62],"decisions":[63],"based":[64],"upon":[65],"many":[66],"pieces":[67],"data":[69],"their":[71,106],"own":[72],"experience,":[73],"which":[74,109],"may":[75],"lend":[76],"itself":[77],"higher":[79],"resolution":[80],"decision-making":[83],"process.":[84],"We":[85],"propose":[86],"using":[87],"machine-oriented":[88],"indicators":[89],"compromise":[91],"trigger":[93],"progressive,":[94],"incremental":[95],"cocooning":[96,134],"by":[100],"replacing":[101],"real":[102,113],"network":[103],"services":[104,114,119],"with":[105],"emulated":[107,118],"counterparts,":[108],"are":[110],"indistinguishable":[111],"attackers.":[116],"The":[117],"will":[120],"be":[121],"instrumented":[122],"gather":[124],"additional":[125],"details":[126],"about":[127],"attacker's":[129],"tools":[130],"techniques.":[132],"Incremental":[133],"reduces":[135],"effect":[137],"on":[138],"normal":[139],"users'":[140],"experiences.":[141]},"counts_by_year":[{"year":2015,"cited_by_count":1}],"updated_date":"2026-07-15T18:14:33.161393","created_date":"2025-10-10T00:00:00"}