Primer – A Tool for Testing Honeypot Measures of Effectiveness

by   Jason M. Pittman, et al.

Honeypots are a deceptive technology used to capture malicious activity. The technology is useful for studying attacker behavior, tools, and techniques but can be difficult to implement and maintain. Historically, a lack of measures of effectiveness prevented researchers from assessing honeypot implementations. The consequence being ineffective implementations leading to poor performance, flawed imitation of legitimate services, and premature discovery by attackers. Previously, we developed a taxonomy for measures of effectiveness in dynamic honeypot implementations. The measures quantify a dynamic honeypot's effectiveness in fingerprinting its environment, capturing valid data from adversaries, deceiving adversaries, and intelligently monitoring itself and its surroundings. As a step towards developing automated effectiveness testing, this work introduces a tool for priming a target honeypot for evaluation. We outline the design of the tool and provide results in the form of quantitative calibration data.



There are no comments yet.


page 1

page 2

page 3

page 4


A Taxonomy for Dynamic Honeypot Measures of Effectiveness

Honeypots are computing systems used to capture unauthorized, often mali...

Survey and Taxonomy of Adversarial Reconnaissance Techniques

Adversaries are often able to penetrate networks and compromise systems ...

Streamlining Evaluation with ir-measures

We present ir-measures, a new tool that makes it convenient to calculate...

Biometric Verification Secure Against Malicious Adversaries

Biometric verification has been widely deployed in current authenticatio...

Towards Causal Models for Adversary Distractions

Automated adversary emulation is becoming an indispensable tool of netwo...

Evaluation Measures for Relevance and Credibility in Ranked Lists

Recent discussions on alternative facts, fake news, and post truth polit...

An Automated Framework for Board-level Trojan Benchmarking

Economic and operational advantages have led the supply chain of printed...
This week in AI

Get the week's most popular data science and artificial intelligence research sent straight to your inbox every Saturday.