Honeypots: Tracking Hackers

By L. Spitzner. 2002

874 citations recorded by the source corpus.

How researchers see this paper

The researchers whose trusted networks rank it highest, strongest advocate first. Every researcher gets a different order.

Citations in the corpus

Is Feature Selection Secure against Training Data Poisoning? (2015, background): “…may be expensive and time-consuming; e.g. , if malware samples are collected from the Internet, by means of honeypots, i.e. , machines that purposely expose known vulnerabilities to be infected by malware (Spitzner, 2002), or other online services, like VirusTotal, 1 labeling errors are possible.”
Is data clustering in adversarial settings secure? (2013, background): “, in the case of malware collected through honeypots [28], where the adversary may easily send (few) samples without having access to the rest of the data.”
Poisoning Complete-Linkage Hierarchical Clustering (2014, background): “, machines that purposely expose known vulnerabilities to be infected by malware [7]), or other ad-hoc services, like VirusTotal.”
A Virtual Honeypot Framework (2004, background): “A low-interaction honeypots simulates only some parts, for example the network stack [24].”
Scalable, Behavior-Based Malware Clustering (2009, background): “, MWCollect [5], ShadowServer [7], VirusTotal [9]) that use technologies such as honeypots [42] to collect malware.”
Honeycomb (2004, background): “Honeypots are decoy computer resources set up for the purpose of monitoring and logging the activities of entities that probe, attack or compromise them[3][4][5].”
The Internet Motion Sensor - A Distributed Blackhole Monitoring System (2005, background): “Depth defines the extent to which a sensor emulates the services and characteristic of a real host, similar to the interaction spectrum in honeypots [24].”
These aren't the droids you're looking for: retrofitting android to protect data from imperious applications (2011, background): “Honeypots and Honeynets [17, 19, 21] have popularized the use of shadow resources to run malware while studying its behavior and limiting its potential to do damage.”