{"id":"https://openalex.org/W4405004237","doi":"https://doi.org/10.3390/fi16120455","title":"Hydrakon, a Framework for Measuring Indicators of Deception in Emulated Monitoring Systems","display_name":"Hydrakon, a Framework for Measuring Indicators of Deception in Emulated Monitoring Systems","publication_year":2024,"publication_date":"2024-12-04","ids":{"openalex":"https://openalex.org/W4405004237","doi":"https://doi.org/10.3390/fi16120455"},"language":"en","primary_location":{"id":"doi:10.3390/fi16120455","is_oa":true,"landing_page_url":"https://doi.org/10.3390/fi16120455","pdf_url":"https://www.mdpi.com/1999-5903/16/12/455/pdf?version=1733301801","source":{"id":"https://openalex.org/S34838331","display_name":"Future Internet","issn_l":"1999-5903","issn":["1999-5903"],"is_oa":true,"is_in_doaj":true,"is_core":true,"host_organization":"https://openalex.org/P4310310987","host_organization_name":"Multidisciplinary Digital Publishing Institute","host_organization_lineage":["https://openalex.org/P4310310987"],"host_organization_lineage_names":["Multidisciplinary Digital Publishing Institute"],"type":"journal"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Future Internet","raw_type":"journal-article"},"type":"article","indexed_in":["crossref","doaj"],"open_access":{"is_oa":true,"oa_status":"gold","oa_url":"https://www.mdpi.com/1999-5903/16/12/455/pdf?version=1733301801","any_repository_has_fulltext":false},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5088268334","display_name":"Kon Papazis","orcid":"https://orcid.org/0000-0002-0656-1277"},"institutions":[{"id":"https://openalex.org/I196829312","display_name":"La Trobe University","ror":"https://ror.org/01rxfrp27","country_code":"AU","type":"education","lineage":["https://openalex.org/I196829312"]}],"countries":["AU"],"is_corresponding":false,"raw_author_name":"Kon Papazis","raw_affiliation_strings":["Department of Computer Science and Information Technology, La Trobe University, Melbourne 3086, Australia"],"raw_orcid":"https://orcid.org/0000-0002-0656-1277","affiliations":[{"raw_affiliation_string":"Department of Computer Science and Information Technology, La Trobe University, Melbourne 3086, Australia","institution_ids":["https://openalex.org/I196829312"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5033056152","display_name":"Naveen Chilamkurti","orcid":"https://orcid.org/0000-0002-5396-8897"},"institutions":[{"id":"https://openalex.org/I196829312","display_name":"La Trobe University","ror":"https://ror.org/01rxfrp27","country_code":"AU","type":"education","lineage":["https://openalex.org/I196829312"]}],"countries":["AU"],"is_corresponding":true,"raw_author_name":"Naveen Chilamkurti","raw_affiliation_strings":["Department of Computer Science and Information Technology, La Trobe University, Melbourne 3086, Australia"],"raw_orcid":"https://orcid.org/0000-0002-5396-8897","affiliations":[{"raw_affiliation_string":"Department of Computer Science and Information Technology, La Trobe University, Melbourne 3086, Australia","institution_ids":["https://openalex.org/I196829312"]}]}],"institutions":[],"countries_distinct_count":1,"institutions_distinct_count":1,"corresponding_author_ids":["https://openalex.org/A5033056152"],"corresponding_institution_ids":["https://openalex.org/I196829312"],"apc_list":{"value":1600,"currency":"CHF","value_usd":1782},"apc_paid":{"value":1600,"currency":"CHF","value_usd":1782},"fwci":0.4301,"has_fulltext":true,"cited_by_count":2,"citation_normalized_percentile":{"value":0.59147279,"is_in_top_1_percent":false,"is_in_top_10_percent":false},"cited_by_percentile_year":{"min":95,"max":96},"biblio":{"volume":"16","issue":"12","first_page":"455","last_page":"455"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T11241","display_name":"Advanced Malware Detection Techniques","score":1.0,"subfield":{"id":"https://openalex.org/subfields/1711","display_name":"Signal Processing"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T11241","display_name":"Advanced Malware Detection Techniques","score":1.0,"subfield":{"id":"https://openalex.org/subfields/1711","display_name":"Signal Processing"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T10400","display_name":"Network Security and Intrusion Detection","score":0.9998000264167786,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T12034","display_name":"Digital and Cyber Forensics","score":0.996399998664856,"subfield":{"id":"https://openalex.org/subfields/1710","display_name":"Information Systems"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/computer-science","display_name":"Computer science","score":0.8691124320030212},{"id":"https://openalex.org/keywords/sandbox","display_name":"Sandbox (software development)","score":0.7946082353591919},{"id":"https://openalex.org/keywords/malware","display_name":"Malware","score":0.6625943779945374},{"id":"https://openalex.org/keywords/honeypot","display_name":"Honeypot","score":0.6574462652206421},{"id":"https://openalex.org/keywords/virtual-machine","display_name":"Virtual machine","score":0.5633934140205383},{"id":"https://openalex.org/keywords/computer-security","display_name":"Computer security","score":0.5323363542556763},{"id":"https://openalex.org/keywords/metric","display_name":"Metric (unit)","score":0.5065711736679077},{"id":"https://openalex.org/keywords/software-deployment","display_name":"Software deployment","score":0.4954169988632202},{"id":"https://openalex.org/keywords/deception","display_name":"Deception","score":0.4851606488227844},{"id":"https://openalex.org/keywords/controller","display_name":"Controller (irrigation)","score":0.44230902194976807},{"id":"https://openalex.org/keywords/operating-system","display_name":"Operating system","score":0.3115847706794739}],"concepts":[{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.8691124320030212},{"id":"https://openalex.org/C167981075","wikidata":"https://www.wikidata.org/wiki/Q2667186","display_name":"Sandbox (software development)","level":2,"score":0.7946082353591919},{"id":"https://openalex.org/C541664917","wikidata":"https://www.wikidata.org/wiki/Q14001","display_name":"Malware","level":2,"score":0.6625943779945374},{"id":"https://openalex.org/C191267431","wikidata":"https://www.wikidata.org/wiki/Q911932","display_name":"Honeypot","level":2,"score":0.6574462652206421},{"id":"https://openalex.org/C25344961","wikidata":"https://www.wikidata.org/wiki/Q192726","display_name":"Virtual machine","level":2,"score":0.5633934140205383},{"id":"https://openalex.org/C38652104","wikidata":"https://www.wikidata.org/wiki/Q3510521","display_name":"Computer security","level":1,"score":0.5323363542556763},{"id":"https://openalex.org/C176217482","wikidata":"https://www.wikidata.org/wiki/Q860554","display_name":"Metric (unit)","level":2,"score":0.5065711736679077},{"id":"https://openalex.org/C105339364","wikidata":"https://www.wikidata.org/wiki/Q2297740","display_name":"Software deployment","level":2,"score":0.4954169988632202},{"id":"https://openalex.org/C2779267917","wikidata":"https://www.wikidata.org/wiki/Q170028","display_name":"Deception","level":2,"score":0.4851606488227844},{"id":"https://openalex.org/C203479927","wikidata":"https://www.wikidata.org/wiki/Q5165939","display_name":"Controller (irrigation)","level":2,"score":0.44230902194976807},{"id":"https://openalex.org/C111919701","wikidata":"https://www.wikidata.org/wiki/Q9135","display_name":"Operating system","level":1,"score":0.3115847706794739},{"id":"https://openalex.org/C77805123","wikidata":"https://www.wikidata.org/wiki/Q161272","display_name":"Social psychology","level":1,"score":0.0},{"id":"https://openalex.org/C21547014","wikidata":"https://www.wikidata.org/wiki/Q1423657","display_name":"Operations management","level":1,"score":0.0},{"id":"https://openalex.org/C162324750","wikidata":"https://www.wikidata.org/wiki/Q8134","display_name":"Economics","level":0,"score":0.0},{"id":"https://openalex.org/C15744967","wikidata":"https://www.wikidata.org/wiki/Q9418","display_name":"Psychology","level":0,"score":0.0},{"id":"https://openalex.org/C6557445","wikidata":"https://www.wikidata.org/wiki/Q173113","display_name":"Agronomy","level":1,"score":0.0},{"id":"https://openalex.org/C86803240","wikidata":"https://www.wikidata.org/wiki/Q420","display_name":"Biology","level":0,"score":0.0}],"mesh":[],"locations_count":3,"locations":[{"id":"doi:10.3390/fi16120455","is_oa":true,"landing_page_url":"https://doi.org/10.3390/fi16120455","pdf_url":"https://www.mdpi.com/1999-5903/16/12/455/pdf?version=1733301801","source":{"id":"https://openalex.org/S34838331","display_name":"Future Internet","issn_l":"1999-5903","issn":["1999-5903"],"is_oa":true,"is_in_doaj":true,"is_core":true,"host_organization":"https://openalex.org/P4310310987","host_organization_name":"Multidisciplinary Digital Publishing Institute","host_organization_lineage":["https://openalex.org/P4310310987"],"host_organization_lineage_names":["Multidisciplinary Digital Publishing Institute"],"type":"journal"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Future Internet","raw_type":"journal-article"},{"id":"pmh:oai:RePEc:gam:jftint:v:16:y:2024:i:12:p:455-:d:1536351","is_oa":false,"landing_page_url":"https://www.mdpi.com/1999-5903/16/12/455/","pdf_url":null,"source":{"id":"https://openalex.org/S4306401271","display_name":"RePEc: Research Papers in Economics","issn_l":null,"issn":null,"is_oa":false,"is_in_doaj":false,"is_core":false,"host_organization":"https://openalex.org/I77793887","host_organization_name":"Federal Reserve Bank of St. Louis","host_organization_lineage":["https://openalex.org/I77793887"],"host_organization_lineage_names":[],"type":"repository"},"license":null,"license_id":null,"version":"submittedVersion","is_accepted":false,"is_published":false,"raw_source_name":null,"raw_type":"article"},{"id":"pmh:oai:doaj.org/article:e6d78e53f0b148069b5c3184783f15c5","is_oa":false,"landing_page_url":"https://doaj.org/article/e6d78e53f0b148069b5c3184783f15c5","pdf_url":null,"source":{"id":"https://openalex.org/S4306401280","display_name":"DOAJ (DOAJ: Directory of Open Access Journals)","issn_l":null,"issn":null,"is_oa":false,"is_in_doaj":false,"is_core":false,"host_organization":null,"host_organization_name":null,"host_organization_lineage":[],"host_organization_lineage_names":[],"type":"repository"},"license":null,"license_id":null,"version":"submittedVersion","is_accepted":false,"is_published":false,"raw_source_name":"Future Internet, Vol 16, Iss 12, p 455 (2024)","raw_type":"article"}],"best_oa_location":{"id":"doi:10.3390/fi16120455","is_oa":true,"landing_page_url":"https://doi.org/10.3390/fi16120455","pdf_url":"https://www.mdpi.com/1999-5903/16/12/455/pdf?version=1733301801","source":{"id":"https://openalex.org/S34838331","display_name":"Future Internet","issn_l":"1999-5903","issn":["1999-5903"],"is_oa":true,"is_in_doaj":true,"is_core":true,"host_organization":"https://openalex.org/P4310310987","host_organization_name":"Multidisciplinary Digital Publishing Institute","host_organization_lineage":["https://openalex.org/P4310310987"],"host_organization_lineage_names":["Multidisciplinary Digital Publishing Institute"],"type":"journal"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Future Internet","raw_type":"journal-article"},"sustainable_development_goals":[{"score":0.6800000071525574,"id":"https://metadata.un.org/sdg/16","display_name":"Peace, Justice and strong institutions"}],"awards":[],"funders":[],"has_content":{"grobid_xml":false,"pdf":true},"content_urls":{"pdf":"https://content.openalex.org/works/W4405004237.pdf"},"referenced_works_count":33,"referenced_works":["https://openalex.org/W138849684","https://openalex.org/W191656338","https://openalex.org/W1684730140","https://openalex.org/W2024170198","https://openalex.org/W2034129977","https://openalex.org/W2039722366","https://openalex.org/W2087740020","https://openalex.org/W2120297918","https://openalex.org/W2128212613","https://openalex.org/W2140807364","https://openalex.org/W2145688371","https://openalex.org/W2157950029","https://openalex.org/W2176386715","https://openalex.org/W2176830056","https://openalex.org/W2491968305","https://openalex.org/W2586610235","https://openalex.org/W2734877009","https://openalex.org/W2737059997","https://openalex.org/W2783112941","https://openalex.org/W2800989355","https://openalex.org/W2807637148","https://openalex.org/W2887711160","https://openalex.org/W2900526031","https://openalex.org/W2912095101","https://openalex.org/W3042654818","https://openalex.org/W3093388472","https://openalex.org/W4302027802","https://openalex.org/W4306145728","https://openalex.org/W4390880500","https://openalex.org/W6604836748","https://openalex.org/W6605738145","https://openalex.org/W6755839861","https://openalex.org/W6756479998"],"related_works":["https://openalex.org/W2350724208","https://openalex.org/W2000018903","https://openalex.org/W3142690625","https://openalex.org/W1534090575","https://openalex.org/W2360866534","https://openalex.org/W2372392697","https://openalex.org/W4312961703","https://openalex.org/W2362932354","https://openalex.org/W2391396896","https://openalex.org/W3003960714"],"abstract_inverted_index":{"The":[0,105,156],"current":[1],"cybersecurity":[2],"ecosystem":[3],"is":[4,66,92],"proving":[5,67],"insufficient":[6],"in":[7],"today\u2019s":[8],"increasingly":[9],"sophisticated":[10],"cyber":[11],"attacks.":[12],"Malware":[13],"authors":[14],"and":[15,33,62,75,98,101,111,116,140,147,165,173,210],"intruders":[16],"have":[17],"pursued":[18],"innovative":[19],"avenues":[20],"to":[21,35,49,58,73,78,134,163,188,198],"circumvent":[22],"emulated":[23,212],"monitoring":[24,213],"systems":[25],"(EMSs)":[26],"such":[27],"as":[28,149],"honeypots,":[29],"virtual":[30,138,175],"machines,":[31,137],"sandboxes":[32],"debuggers":[34],"continue":[36],"with":[37],"their":[38,47,60,80],"malicious":[39],"activities":[40],"while":[41],"remaining":[42],"inconspicuous.":[43],"Cybercriminals":[44],"are":[45],"improving":[46],"ability":[48],"detect":[50],"EMS,":[51],"by":[52,129],"finding":[53],"indicators":[54],"of":[55,94,113,121,193],"deception":[56],"(IoDs)":[57],"expose":[59],"presence":[61],"avoid":[63],"detection.":[64],"It":[65],"a":[68,170,174,185],"challenge":[69],"for":[70,118],"security":[71],"analysts":[72],"deploy":[74],"manage":[76],"EMS":[77,96,106,117,123,154,194],"evaluate":[79],"deceptive":[81,124,191],"capability.":[82],"In":[83],"this":[84],"paper,":[85],"we":[86],"introduce":[87],"the":[88,109,114,119,153,159,190,196,203],"Hydrakon":[89,183],"framework,":[90],"which":[91],"composed":[93],"an":[95],"controller":[97,107],"several":[99],"Linux":[100],"Windows":[102],"10":[103],"clients.":[104],"automates":[108],"deployment":[110],"management":[112],"clients":[115],"purpose":[120],"measuring":[122],"capabilities.":[125],"Experiments":[126],"were":[127,145],"conducted":[128],"applying":[130],"custom":[131],"detection":[132],"vectors":[133],"client":[135],"real":[136,171],"machines":[139],"sandboxes,":[141],"where":[142],"various":[143],"artifacts":[144,168],"extracted":[146],"stored":[148],"csv":[150],"files":[151],"on":[152],"controller.":[155],"experiment":[157],"leverages":[158],"cosine":[160],"similarity":[161],"metric":[162],"compare":[164],"identify":[166],"similar":[167],"between":[169],"system":[172],"machine":[176],"or":[177],"sandbox.":[178],"Our":[179],"results":[180],"show":[181],"that":[182],"offers":[184],"valid":[186],"approach":[187],"assess":[189],"capabilities":[192],"without":[195],"need":[197],"target":[199,204],"specific":[200],"IoD":[201],"within":[202],"system,":[205],"thereby":[206],"fostering":[207],"more":[208],"robust":[209],"effective":[211],"systems.":[214]},"counts_by_year":[{"year":2025,"cited_by_count":2}],"updated_date":"2026-07-23T08:03:31.855105","created_date":"2025-10-10T00:00:00"}