{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2026,4,20]],"date-time":"2026-04-20T10:25:36Z","timestamp":1776680736822,"version":"3.51.2"},"publisher-location":"Cham","reference-count":32,"publisher":"Springer Nature Switzerland","isbn-type":[{"value":"9783031830716","type":"print"},{"value":"9783031830723","type":"electronic"}],"license":[{"start":{"date-parts":[[2025,1,1]],"date-time":"2025-01-01T00:00:00Z","timestamp":1735689600000},"content-version":"tdm","delay-in-days":0,"URL":"https:\/\/www.springernature.com\/gp\/researchers\/text-and-data-mining"},{"start":{"date-parts":[[2025,1,1]],"date-time":"2025-01-01T00:00:00Z","timestamp":1735689600000},"content-version":"vor","delay-in-days":0,"URL":"https:\/\/www.springernature.com\/gp\/researchers\/text-and-data-mining"}],"content-domain":{"domain":["link.springer.com"],"crossmark-restriction":false},"short-container-title":[],"published-print":{"date-parts":[[2025]]},"DOI":"10.1007\/978-3-031-83072-3_2","type":"book-chapter","created":{"date-parts":[[2025,3,12]],"date-time":"2025-03-12T18:58:37Z","timestamp":1741805917000},"page":"14-30","update-policy":"https:\/\/doi.org\/10.1007\/springer_crossmark_policy","source":"Crossref","is-referenced-by-count":2,"title":["Hunting High or\u00a0Low: Evaluating the\u00a0Effectiveness of\u00a0High-Interaction and\u00a0Low-Interaction Honeypots"],"prefix":"10.1007","author":[{"given":"Yekta","family":"Kocaogullar","sequence":"first","affiliation":[],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Orcun","family":"Cetin","sequence":"additional","affiliation":[],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Budi","family":"Arief","sequence":"additional","affiliation":[],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Calvin","family":"Brierley","sequence":"additional","affiliation":[],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Jamie","family":"Pont","sequence":"additional","affiliation":[],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Julio","family":"Hernandez-Castro","sequence":"additional","affiliation":[],"role":[{"role":"author","vocabulary":"crossref"}]}],"member":"297","published-online":{"date-parts":[[2025,3,13]]},"reference":[{"key":"2_CR1","unstructured":"Curated list of awesome lists. https:\/\/project-awesome.org\/paralax\/awesome-honeypots"},{"key":"2_CR2","unstructured":"GeoIP and GeoLite. https:\/\/dev.maxmind.com\/geoip?lang=en"},{"key":"2_CR3","unstructured":"Honeypot or not? https:\/\/honeyscore.shodan.io\/"},{"key":"2_CR4","unstructured":"nessus. https:\/\/www.tenable.com\/products\/nessus"},{"key":"2_CR5","unstructured":"nessus. Offensive security\u2019s Exploit Database Archive. https:\/\/www.exploit-db.com\/"},{"key":"2_CR6","doi-asserted-by":"crossref","unstructured":"Aguirre-Anaya, E., Gallegos-Garcia, G., Luna, N.S., Vargas, L.A.V.: A new procedure to detect low interaction honeypots. Int. J. Electr. Comput. Eng. (IJECE) 4(6) (2014)","DOI":"10.11591\/ijece.v4i6.6885"},{"key":"2_CR7","doi-asserted-by":"crossref","unstructured":"Alata, E., Nicomette, V., Ka\u00e2niche, M., Dacier, M., Herrb, M.: Lessons learned from the deployment of a high-interaction honeypot. In: 2006 Sixth European Dependable Computing Conference, pp. 39\u201346. IEEE (2006)","DOI":"10.1109\/EDCC.2006.17"},{"key":"2_CR8","unstructured":"Bontchev. Bontchev\/elasticpot: An elasticsearch honeypot. https:\/\/github.com\/bontchev\/elasticpot"},{"key":"2_CR9","doi-asserted-by":"crossref","unstructured":"Campbell, R.M., Padayachee,K., Masombuka, T.: A survey of honeypot research: Trends and opportunities. In: 10th International Conference for Internet Technology and Secured Transactions (ICITST), pp. 208\u2013212. IEEE (2015)","DOI":"10.1109\/ICITST.2015.7412090"},{"key":"2_CR10","unstructured":"Cimpanu, C.: A hacker has wiped, defaced more than 15,000 elasticsearch servers (2020)"},{"key":"2_CR11","doi-asserted-by":"crossref","unstructured":"Defibaugh-Chavez, P., Veeraghattam, R., Kannappa, M., Mukkamala, S., Sung, A.H.: Network based detection of virtual environments and low interaction honeypots. In: Proceedings of the 2006 IEEE SMC, Workshop on Information Assurance, pp. 283\u2013289 (2006)","DOI":"10.1109\/IAW.2006.1652107"},{"issue":"4","key":"2_CR12","doi-asserted-by":"publisher","first-page":"3906","DOI":"10.1109\/JSYST.2017.2762161","volume":"12","author":"W Fan","year":"2017","unstructured":"Fan, W., Du, Z., Fern\u00e1ndez, D., Villagra, V.A.: Enabling an anatomic view to investigate honeypot systems: a survey. IEEE Systems J. 12(4), 3906\u20133919 (2017)","journal-title":"IEEE Systems J."},{"key":"2_CR13","unstructured":"Jordan-Wright. Jordan-Wright\/elastichoney: a simple elasticsearch honeypot. https:\/\/github.com\/jordan-wright\/elastichoney"},{"issue":"5","key":"2_CR14","first-page":"6098","volume":"5","author":"N Kambow","year":"2014","unstructured":"Kambow, N., Passi, L.K.: Honeypots: the need of network security. Int. J. Comput. Sci. Inf. Technol. 5(5), 6098\u20136101 (2014)","journal-title":"Int. J. Comput. Sci. Inf. Technol."},{"key":"2_CR15","unstructured":"Xiphos\u00a0Research Ltd. Elasticsearch - remote code execution (2015). https:\/\/www.exploit-db.com\/exploits\/36337"},{"key":"2_CR16","unstructured":"Maciej. Collection of honeypots (2019). https:\/\/iceburn.medium.com\/collection-of-honeypots-a7ec6e446163"},{"key":"2_CR17","doi-asserted-by":"crossref","unstructured":"Mokube, I., Adams, M.: Honeypots: concepts, approaches, and challenges. In: Proceedings of the 45th Annual Southeast Regional Conference, pp. 321\u2013326 (2007)","DOI":"10.1145\/1233341.1233399"},{"key":"2_CR18","unstructured":"Morishita, S., et al.: Detect me if you\u2026 oh wait. An internet-wide view of self-revealing honeypots. In: 2019 IFIP\/IEEE Symposium on Integrated Network and Service Management (IM), pp. 134\u2013143. IEEE (2019)"},{"key":"2_CR19","doi-asserted-by":"crossref","unstructured":"Mukkamala, S., Yendrapalli, K., Basnet, R., Shankarapani, M.K., Sung, A.H.: Detection of virtual environments and low interaction honeypots. In 2007 IEEE SMC Information Assurance and Security Workshop, pp. 92\u201398. IEEE (2007)","DOI":"10.1109\/IAW.2007.381919"},{"key":"2_CR20","doi-asserted-by":"crossref","unstructured":"Mushtakov, R.E., Silnov, D.S.: New approach to detect suspicious activity using http-proxy honeypots. In: 2017 IEEE Conference of Russian Young Researchers in Electrical and Electronic Engineering (EIConRus), pp. 600\u2013605. IEEE (2017)","DOI":"10.1109\/EIConRus.2017.7910525"},{"key":"2_CR21","doi-asserted-by":"crossref","unstructured":"Nagpal, B., Singh, N., Chauhan, N., Sharma, P.: CATCH: comparison and analysis of tools covering honeypots. In: 2015 International Conference on Advances in Computer Engineering and Applications, pp. 783\u2013786. IEEE (2015)","DOI":"10.1109\/ICACEA.2015.7164809"},{"key":"2_CR22","unstructured":"Elastic NV. What is elasticsearch? https:\/\/www.elastic.co\/what-is\/elasticsearch"},{"key":"2_CR23","unstructured":"Paganini, P.: Data breaches tracker monitor unsecured Elasticsearch Servers Online (2021). https:\/\/securityaffairs.co\/wordpress\/115698\/security\/data-breaches-tracker-unsecured-elasticsearch.html"},{"key":"2_CR24","unstructured":"Jordan\u00a0Wright\u2019s Picture, Jordan\u00a0WrightSecurity Researcher, and San Antonio. Introducing Elastichoney - an Elasticsearch Honeypot (2015). https:\/\/jordan-wright.com\/blog\/2015\/03\/23\/introducing-elastichoney-an-elasticsearch-honeypot\/"},{"key":"2_CR25","unstructured":"Sanfilippo, S., et\u00a0al.: Hping-active network security tool (2008). http:\/\/www.hping.org\/"},{"key":"2_CR26","unstructured":"SecurityTW. SecurityTW\/Delilah. https:\/\/github.com\/SecurityTW\/delilah"},{"key":"2_CR27","unstructured":"Seifert, C., Welch, I., Komisarczuk, P.: Taxonomy of honeypots (2006)"},{"key":"2_CR28","unstructured":"Send-Safe. Send-safe honeypot hunter download (2022). https:\/\/send-safe-honeypot-hunter.apponic.com\/"},{"key":"2_CR29","unstructured":"Shodan. Shodan Search Engine. https:\/\/www.shodan.io"},{"key":"2_CR30","doi-asserted-by":"crossref","unstructured":"Tsikerdekis, M., Zeadally, S., Schlesener, A., Sklavos, N.: Approaches for preventing honeypot detection and compromise. In: 2018 Global Information Infrastructure and Networking Symposium (GIIS), pp. 1\u20136. IEEE (2018)","DOI":"10.1109\/GIIS.2018.8635603"},{"key":"2_CR31","doi-asserted-by":"crossref","unstructured":"Zakari, A., Lawan, A.A., Bekaroo, G.: Towards improving the security of low-interaction honeypots: insights from a comparative analysis. In: International Conference on Emerging Trends in Electrical, Electronic and Communications Engineering, pp. 314\u2013321. Springer (2016)","DOI":"10.1007\/978-3-319-52171-8_28"},{"key":"2_CR32","unstructured":"Zion3R. Collection of awesome honeypots (2015). https:\/\/www.kitploit.com\/2015\/12\/collection-of-awesome-honeypots.html"}],"container-title":["Lecture Notes in Computer Science","Socio-Technical Aspects in Security"],"original-title":[],"language":"en","link":[{"URL":"https:\/\/link.springer.com\/content\/pdf\/10.1007\/978-3-031-83072-3_2","content-type":"unspecified","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2025,3,12]],"date-time":"2025-03-12T18:58:47Z","timestamp":1741805927000},"score":1,"resource":{"primary":{"URL":"https:\/\/link.springer.com\/10.1007\/978-3-031-83072-3_2"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2025]]},"ISBN":["9783031830716","9783031830723"],"references-count":32,"URL":"https:\/\/doi.org\/10.1007\/978-3-031-83072-3_2","relation":{},"ISSN":["0302-9743","1611-3349"],"issn-type":[{"value":"0302-9743","type":"print"},{"value":"1611-3349","type":"electronic"}],"subject":[],"published":{"date-parts":[[2025]]},"assertion":[{"value":"13 March 2025","order":1,"name":"first_online","label":"First Online","group":{"name":"ChapterHistory","label":"Chapter History"}},{"value":"STAST","order":1,"name":"conference_acronym","label":"Conference Acronym","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"International Workshop on Socio-Technical Aspects in Security","order":2,"name":"conference_name","label":"Conference Name","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"Copenhagen","order":3,"name":"conference_city","label":"Conference City","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"Denmark","order":4,"name":"conference_country","label":"Conference Country","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"2022","order":5,"name":"conference_year","label":"Conference Year","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"26 September 2022","order":7,"name":"conference_start_date","label":"Conference Start Date","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"26 September 2022","order":8,"name":"conference_end_date","label":"Conference End Date","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"12","order":9,"name":"conference_number","label":"Conference Number","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"stast2022","order":10,"name":"conference_id","label":"Conference ID","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"https:\/\/stast.uni.lu\/","order":11,"name":"conference_url","label":"Conference URL","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"Double-blind","order":1,"name":"type","label":"Type","group":{"name":"ConfEventPeerReviewInformation","label":"Peer Review Information (provided by the conference organizers)"}},{"value":"Easychair","order":2,"name":"conference_management_system","label":"Conference Management System","group":{"name":"ConfEventPeerReviewInformation","label":"Peer Review Information (provided by the conference organizers)"}},{"value":"20","order":3,"name":"number_of_submissions_sent_for_review","label":"Number of Submissions Sent for Review","group":{"name":"ConfEventPeerReviewInformation","label":"Peer Review Information (provided by the conference organizers)"}},{"value":"6","order":4,"name":"number_of_full_papers_accepted","label":"Number of Full Papers Accepted","group":{"name":"ConfEventPeerReviewInformation","label":"Peer Review Information (provided by the conference organizers)"}},{"value":"2","order":5,"name":"number_of_short_papers_accepted","label":"Number of Short Papers Accepted","group":{"name":"ConfEventPeerReviewInformation","label":"Peer Review Information (provided by the conference organizers)"}},{"value":"30% - The value is computed by the equation \"Number of Full Papers Accepted \/ Number of Submissions Sent for Review * 100\" and then rounded to a whole number.","order":6,"name":"acceptance_rate_of_full_papers","label":"Acceptance Rate of Full Papers","group":{"name":"ConfEventPeerReviewInformation","label":"Peer Review Information (provided by the conference organizers)"}},{"value":"3","order":7,"name":"average_number_of_reviews_per_paper","label":"Average Number of Reviews per Paper","group":{"name":"ConfEventPeerReviewInformation","label":"Peer Review Information (provided by the conference organizers)"}},{"value":"2","order":8,"name":"average_number_of_papers_per_reviewer","label":"Average Number of Papers per Reviewer","group":{"name":"ConfEventPeerReviewInformation","label":"Peer Review Information (provided by the conference organizers)"}},{"value":"Yes","order":9,"name":"external_reviewers_involved","label":"External Reviewers Involved","group":{"name":"ConfEventPeerReviewInformation","label":"Peer Review Information (provided by the conference organizers)"}},{"value":"1 external reviewers involved (outside the PC)","order":10,"name":"additional_info_on_review_process","label":"Additional Info on Review Process","group":{"name":"ConfEventPeerReviewInformation","label":"Peer Review Information (provided by the conference organizers)"}}]}}