{"id":"https://openalex.org/W3113768139","doi":"https://doi.org/10.1145/3427477.3429772","title":"Who is Trying to Compromise Your SSH Server ? An Analysis of Authentication Logs and Detection of Bruteforce Attacks","display_name":"Who is Trying to Compromise Your SSH Server ? An Analysis of Authentication Logs and Detection of Bruteforce Attacks","publication_year":2020,"publication_date":"2020-12-30","ids":{"openalex":"https://openalex.org/W3113768139","doi":"https://doi.org/10.1145/3427477.3429772","mag":"3113768139"},"language":"en","primary_location":{"id":"doi:10.1145/3427477.3429772","is_oa":false,"landing_page_url":"https://doi.org/10.1145/3427477.3429772","pdf_url":null,"source":null,"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Adjunct Proceedings of the 2021 International Conference on Distributed Computing and Networking","raw_type":"proceedings-article"},"type":"conference-paper","indexed_in":["crossref"],"open_access":{"is_oa":false,"oa_status":"closed","oa_url":null,"any_repository_has_fulltext":false},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5055083020","display_name":"Pratibha Khandait","orcid":null},"institutions":[{"id":"https://openalex.org/I64295750","display_name":"Indian Institute of Technology Indore","ror":"https://ror.org/01hhf7w52","country_code":"IN","type":"education","lineage":["https://openalex.org/I64295750"]}],"countries":["IN"],"is_corresponding":false,"raw_author_name":"Pratibha Khandait","raw_affiliation_strings":["Indian Institute of Technology Indore, IN"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Indian Institute of Technology Indore, IN","institution_ids":["https://openalex.org/I64295750"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5069221216","display_name":"Namrata Tiwari","orcid":"https://orcid.org/0000-0002-1901-0271"},"institutions":[{"id":"https://openalex.org/I64295750","display_name":"Indian Institute of Technology Indore","ror":"https://ror.org/01hhf7w52","country_code":"IN","type":"education","lineage":["https://openalex.org/I64295750"]}],"countries":["IN"],"is_corresponding":false,"raw_author_name":"Namrata Tiwari","raw_affiliation_strings":["Indian Institute of Technology Indore, IN"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Indian Institute of Technology Indore, IN","institution_ids":["https://openalex.org/I64295750"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5028480555","display_name":"Neminath Hubballi","orcid":"https://orcid.org/0000-0001-9669-9773"},"institutions":[{"id":"https://openalex.org/I64295750","display_name":"Indian Institute of Technology Indore","ror":"https://ror.org/01hhf7w52","country_code":"IN","type":"education","lineage":["https://openalex.org/I64295750"]}],"countries":["IN"],"is_corresponding":false,"raw_author_name":"Neminath Hubballi","raw_affiliation_strings":["Indian Institute of Technology Indore, IN"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Indian Institute of Technology Indore, IN","institution_ids":["https://openalex.org/I64295750"]}]}],"institutions":[],"countries_distinct_count":1,"institutions_distinct_count":1,"corresponding_author_ids":[],"corresponding_institution_ids":["https://openalex.org/I64295750"],"apc_list":null,"apc_paid":null,"fwci":1.1707,"has_fulltext":false,"cited_by_count":9,"citation_normalized_percentile":{"value":0.77223755,"is_in_top_1_percent":false,"is_in_top_10_percent":false},"cited_by_percentile_year":{"min":94,"max":97},"biblio":{"volume":null,"issue":null,"first_page":"127","last_page":"132"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T10400","display_name":"Network Security and Intrusion Detection","score":1.0,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T10400","display_name":"Network Security and Intrusion Detection","score":1.0,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11512","display_name":"Anomaly Detection Techniques and Applications","score":0.9991000294685364,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T12034","display_name":"Digital and Cyber Forensics","score":0.9976000189781189,"subfield":{"id":"https://openalex.org/subfields/1710","display_name":"Information Systems"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/login","display_name":"Login","score":0.9269624948501587},{"id":"https://openalex.org/keywords/computer-science","display_name":"Computer science","score":0.773186206817627},{"id":"https://openalex.org/keywords/computer-security","display_name":"Computer security","score":0.5644792914390564},{"id":"https://openalex.org/keywords/authentication","display_name":"Authentication (law)","score":0.4833083152770996},{"id":"https://openalex.org/keywords/server","display_name":"Server","score":0.4831916391849518},{"id":"https://openalex.org/keywords/operating-system","display_name":"Operating system","score":0.3340785801410675}],"concepts":[{"id":"https://openalex.org/C113324615","wikidata":"https://www.wikidata.org/wiki/Q472302","display_name":"Login","level":2,"score":0.9269624948501587},{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.773186206817627},{"id":"https://openalex.org/C38652104","wikidata":"https://www.wikidata.org/wiki/Q3510521","display_name":"Computer security","level":1,"score":0.5644792914390564},{"id":"https://openalex.org/C148417208","wikidata":"https://www.wikidata.org/wiki/Q4825882","display_name":"Authentication (law)","level":2,"score":0.4833083152770996},{"id":"https://openalex.org/C93996380","wikidata":"https://www.wikidata.org/wiki/Q44127","display_name":"Server","level":2,"score":0.4831916391849518},{"id":"https://openalex.org/C111919701","wikidata":"https://www.wikidata.org/wiki/Q9135","display_name":"Operating system","level":1,"score":0.3340785801410675}],"mesh":[],"locations_count":1,"locations":[{"id":"doi:10.1145/3427477.3429772","is_oa":false,"landing_page_url":"https://doi.org/10.1145/3427477.3429772","pdf_url":null,"source":null,"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Adjunct Proceedings of the 2021 International Conference on Distributed Computing and Networking","raw_type":"proceedings-article"}],"best_oa_location":null,"sustainable_development_goals":[],"awards":[],"funders":[],"has_content":{"grobid_xml":false,"pdf":false},"content_urls":null,"referenced_works_count":8,"referenced_works":["https://openalex.org/W1576184827","https://openalex.org/W2004013580","https://openalex.org/W2090934172","https://openalex.org/W2142839897","https://openalex.org/W2158880761","https://openalex.org/W2786490145","https://openalex.org/W2810172836","https://openalex.org/W2969892291"],"related_works":["https://openalex.org/W4235220108","https://openalex.org/W4256170434","https://openalex.org/W4233948907","https://openalex.org/W4315650027","https://openalex.org/W4238894392","https://openalex.org/W2357607877","https://openalex.org/W4238771742","https://openalex.org/W4235839583","https://openalex.org/W4311722428","https://openalex.org/W2912135041"],"abstract_inverted_index":{"Secure":[0],"Socket":[1],"Shell":[2],"(SSH)":[3],"allows":[4],"users":[5],"to":[6,30,127,158,173,189,208],"connect":[7],"and":[8,113,147,176,185,201],"access":[9],"the":[10,22,50,130,161],"system":[11,34,162],"remotely":[12],"through":[13],"a":[14,33,46,63,74,78,82,150,166,171],"publicly":[15],"exposed":[16],"interface.":[17],"These":[18,39],"systems":[19],"often":[20],"become":[21],"target":[23],"of":[24,68,84,99,108,116,142,153],"attacks":[25,143],"where":[26],"an":[27,69],"intruder":[28],"attempts":[29,41,157,179],"break":[31,128,159],"into":[32,45,129,160],"by":[35,49],"guessing":[36],"login":[37,40,101,178],"credentials.":[38],"are":[42,133,144,212],"generally":[43],"recorded":[44],"log":[47],"file":[48],"server.":[51],"Our":[52,118],"contribution":[53],"in":[54,73],"this":[55],"paper":[56],"is":[57,206],"twofold.":[58],"First":[59],"we":[60,95,169],"report":[61],"on":[62],"case":[64,119],"study":[65,96,120],"using":[66,180],"logs":[67],"SSH":[70],"server":[71],"deployed":[72],"production":[75],"environment.":[76],"Using":[77],"dataset":[79],"collected":[80],"over":[81,111],"span":[83],"one":[85,90],"month":[86],"with":[87,194,198],"more":[88,148],"than":[89,149],"hundred":[91],"thousand":[92],"connection":[93],"records,":[94],"various":[97,125],"types":[98],"failed":[100,175,213],"attempts,":[102],"common":[103,135],"usernames":[104,136],"being":[105],"attempted,":[106],"recurrence":[107],"attack":[109],"sources":[110,154],"time":[112],"geographical":[114],"location":[115],"attackers.":[117],"reveals":[121],"that":[122,203],"attackers":[123],"attempt":[124],"methods":[126],"system,":[131],"there":[132],"few":[134],"which":[137,211],"were":[138],"tried":[139],"persistently,":[140],"origin":[141],"well":[145,215],"spread":[146],"handful":[151],"number":[152],"make":[155],"repeated":[156],"spanning":[163],"weeks.":[164],"As":[165],"second":[167],"contribution,":[168],"propose":[170],"method":[172,205],"differentiate":[174],"successful":[177],"network":[181],"flow":[182,195],"level":[183],"statistics":[184],"subsequently":[186],"use":[187],"them":[188],"detect":[190],"attacks.":[191],"We":[192],"experiment":[193],"records":[196],"labelled":[197],"ground":[199],"truth":[200],"show":[202],"proposed":[204],"able":[207],"identify":[209],"logins":[210],"as":[214,216],"successful.":[217]},"counts_by_year":[{"year":2025,"cited_by_count":2},{"year":2024,"cited_by_count":2},{"year":2023,"cited_by_count":2},{"year":2022,"cited_by_count":3}],"updated_date":"2026-07-30T17:31:21.811387","created_date":"2025-10-10T00:00:00"}