{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2026,7,15]],"date-time":"2026-07-15T16:58:53Z","timestamp":1784134733020,"version":"3.55.0"},"publisher-location":"New York, NY, USA","reference-count":43,"publisher":"ACM","license":[{"start":{"date-parts":[[2023,5,29]],"date-time":"2023-05-29T00:00:00Z","timestamp":1685318400000},"content-version":"vor","delay-in-days":0,"URL":"https:\/\/www.acm.org\/publications\/policies\/copyright_policy#Background"}],"funder":[{"name":"U.S. Army Combat Capabilities Development Command Army Research Laboratory","award":["W911NF-13-2-0045"],"award-info":[{"award-number":["W911NF-13-2-0045"]}]}],"content-domain":{"domain":["dl.acm.org"],"crossmark-restriction":true},"short-container-title":[],"published-print":{"date-parts":[[2023,5,29]]},"DOI":"10.1145\/3558482.3590195","type":"proceedings-article","created":{"date-parts":[[2023,6,28]],"date-time":"2023-06-28T16:10:08Z","timestamp":1687968608000},"page":"49-59","update-policy":"https:\/\/doi.org\/10.1145\/crossmark-policy","source":"Crossref","is-referenced-by-count":27,"title":["HoneyIoT: Adaptive High-Interaction Honeypot for IoT Devices Through Reinforcement Learning"],"prefix":"10.1145","author":[{"ORCID":"https:\/\/orcid.org\/0009-0005-1684-0682","authenticated-orcid":false,"given":"Chongqi","family":"Guan","sequence":"first","affiliation":[{"name":"The Pennsylvania State University, University Park, PA, USA"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"ORCID":"https:\/\/orcid.org\/0000-0002-0321-347X","authenticated-orcid":false,"given":"Heting","family":"Liu","sequence":"additional","affiliation":[{"name":"The Pennsylvania State University, University Park, PA, USA"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"ORCID":"https:\/\/orcid.org\/0000-0003-2115-7165","authenticated-orcid":false,"given":"Guohong","family":"Cao","sequence":"additional","affiliation":[{"name":"The Pennsylvania State University, University Park, PA, USA"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"ORCID":"https:\/\/orcid.org\/0000-0002-1047-7967","authenticated-orcid":false,"given":"Sencun","family":"Zhu","sequence":"additional","affiliation":[{"name":"The Pennsylvania State University, University Park, PA, USA"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"ORCID":"https:\/\/orcid.org\/0000-0003-1295-4461","authenticated-orcid":false,"given":"Thomas","family":"La Porta","sequence":"additional","affiliation":[{"name":"The Pennsylvania State University, University Park, PA, USA"}],"role":[{"vocabulary":"crossref","role":"author"}]}],"member":"320","published-online":{"date-parts":[[2023,6,28]]},"reference":[{"key":"e_1_3_2_1_1_1","doi-asserted-by":"publisher","DOI":"10.1109\/COMST.2019.2910750"},{"key":"e_1_3_2_1_2_1","volume-title":"SoK: Security Evaluation of Home-Based IoT Deployments. IEEE Symp. on Security and Privacy","author":"Alrawi O.","year":"2019","unstructured":"O. Alrawi , C. Lever , M. Antonakakis , and F. Monrose . SoK: Security Evaluation of Home-Based IoT Deployments. IEEE Symp. on Security and Privacy , May 2019 . O. Alrawi, C. Lever, M. Antonakakis, and F. Monrose. SoK: Security Evaluation of Home-Based IoT Deployments. IEEE Symp. on Security and Privacy, May 2019."},{"key":"e_1_3_2_1_3_1","volume-title":"The Circle Of Life: A Large-Scale Study of The IoT Malware Lifecycle. USENIX Security Symp.","author":"Alrawi O.","year":"2021","unstructured":"O. Alrawi , C. Lever , K. Valakuzhy , R. Court , K. Snow , F. Monrose , and M. Antonakakis . The Circle Of Life: A Large-Scale Study of The IoT Malware Lifecycle. USENIX Security Symp. , 2021 . O. Alrawi, C. Lever, K. Valakuzhy, R. Court, K. Snow, F. Monrose, and M. Antonakakis. The Circle Of Life: A Large-Scale Study of The IoT Malware Lifecycle. USENIX Security Symp., 2021."},{"key":"e_1_3_2_1_4_1","doi-asserted-by":"publisher","DOI":"10.1145\/3548606.3560644"},{"key":"e_1_3_2_1_5_1","volume-title":"Understanding the Mirai Botnet. USENIX Security Symp.","author":"Antonakakis M.","year":"2017","unstructured":"M. Antonakakis , T. April , M. Bailey , M. Bernhard , E. Bursztein , J. Cochran , Z. Durumeric , J. A. Halderman , L. Invernizzi , M. Kallitsis , Understanding the Mirai Botnet. USENIX Security Symp. , 2017 . M. Antonakakis, T. April, M. Bailey, M. Bernhard, E. Bursztein, J. Cochran, Z. Durumeric, J. A. Halderman, L. Invernizzi, M. Kallitsis, et al. Understanding the Mirai Botnet. USENIX Security Symp., 2017."},{"key":"e_1_3_2_1_6_1","unstructured":"Mozi Botnet Accounts for Majority of IoT Traffic. https:\/\/threatpost.com\/mozibotnet-majority-iot-traffic\/159337\/.  Mozi Botnet Accounts for Majority of IoT Traffic. https:\/\/threatpost.com\/mozibotnet-majority-iot-traffic\/159337\/."},{"key":"e_1_3_2_1_7_1","unstructured":"Nmap: Open-source network scanner. https:\/\/nmap.org\/.  Nmap: Open-source network scanner. https:\/\/nmap.org\/."},{"key":"e_1_3_2_1_8_1","unstructured":"Shodan Honeyscore. https:\/\/honeyscore.shodan.io\/.  Shodan Honeyscore. https:\/\/honeyscore.shodan.io\/."},{"key":"e_1_3_2_1_9_1","unstructured":"Send-Safe Honeypot Hunter. http:\/\/www.send-safe.com\/honeypot-hunter.html.  Send-Safe Honeypot Hunter. http:\/\/www.send-safe.com\/honeypot-hunter.html."},{"key":"e_1_3_2_1_10_1","volume-title":"IoTPOT: Analysing the Rise of IoT Compromises. USENIX Workshop on Offensive Technol.","author":"Pa Y.","year":"2015","unstructured":"Y. Pa , S. Suzuki , K. Yoshioka , T. Matsumoto , T. Kasama , and C. Rossow . IoTPOT: Analysing the Rise of IoT Compromises. USENIX Workshop on Offensive Technol. , 2015 . Y. Pa, S. Suzuki, K. Yoshioka, T. Matsumoto, T. Kasama, and C. Rossow. IoTPOT: Analysing the Rise of IoT Compromises. USENIX Workshop on Offensive Technol., 2015."},{"key":"e_1_3_2_1_11_1","unstructured":"Masscan. https:\/\/github.com\/robertdavidgraham\/masscan.  Masscan. https:\/\/github.com\/robertdavidgraham\/masscan."},{"key":"e_1_3_2_1_12_1","unstructured":"Shodan: Search Engine for the Internet of Everything . https:\/\/www.shodan.io\/.  Shodan: Search Engine for the Internet of Everything . https:\/\/www.shodan.io\/."},{"key":"e_1_3_2_1_13_1","volume-title":"IEEE Commun. Surveys & Tutorials","author":"Franco J.","year":"2021","unstructured":"J. Franco , A. Aris , B. Canberk , and S. Uluagac . A Survey of Honeypots and Honeynets for Internet of Things, Industrial Internet of Things, and CyberPhysical Systems . IEEE Commun. Surveys & Tutorials , August 2021 . J. Franco, A. Aris, B. Canberk, and S. Uluagac. A Survey of Honeypots and Honeynets for Internet of Things, Industrial Internet of Things, and CyberPhysical Systems. IEEE Commun. Surveys & Tutorials, August 2021."},{"key":"e_1_3_2_1_14_1","volume-title":"Oh Wait. An Internet-Wide View of Self-Revealing Honeypots. IFIP\/IEEE Symp. on Integrated Network and Service Management","author":"Morishita S.","year":"2019","unstructured":"S. Morishita , T. Hoizumi , W. Ueno , R. Tanabe , C. Ga\u00f1\u00e1n , M. van Eeten , K. Yoshioka , and T. Matsumoto . Detect Me If You . . . Oh Wait. An Internet-Wide View of Self-Revealing Honeypots. IFIP\/IEEE Symp. on Integrated Network and Service Management , 2019 . S. Morishita, T. Hoizumi, W. Ueno, R. Tanabe, C. Ga\u00f1\u00e1n, M. van Eeten, K. Yoshioka, and T. Matsumoto. Detect Me If You. . . Oh Wait. An Internet-Wide View of Self-Revealing Honeypots. IFIP\/IEEE Symp. on Integrated Network and Service Management, 2019."},{"key":"e_1_3_2_1_15_1","volume-title":"USENIX Workshop on Offensive Technol.","author":"Vetterl A.","year":"2018","unstructured":"A. Vetterl , and R. Clayton . Bitter Harvest: Systematically Fingerprinting Lowand Medium-interaction Honeypots at Internet Scale . USENIX Workshop on Offensive Technol. , 2018 . A. Vetterl, and R. Clayton. Bitter Harvest: Systematically Fingerprinting Lowand Medium-interaction Honeypots at Internet Scale. USENIX Workshop on Offensive Technol., 2018."},{"key":"e_1_3_2_1_16_1","volume-title":"Studying the Fingerprintability of ICS Honeypots in the Wild. Annual Industrial Control System Security Workshop","author":"Zamiri-Gourabi M.","year":"2019","unstructured":"M. Zamiri-Gourabi , Ali R. Qalaei , and B. Azad . Gas What? I Can See Your GasPots . Studying the Fingerprintability of ICS Honeypots in the Wild. Annual Industrial Control System Security Workshop , 2019 . M. Zamiri-Gourabi, Ali R. Qalaei, and B. Azad. Gas What? I Can See Your GasPots. Studying the Fingerprintability of ICS Honeypots in the Wild. Annual Industrial Control System Security Workshop, 2019."},{"key":"e_1_3_2_1_17_1","volume-title":"Acquisitional Rule-based Engine for Discovering Internet-of-Things Devices. USENIX Security Symp.","author":"Feng X.","year":"2018","unstructured":"X. Feng , Q. Li , H. Wang , and L. Sun . Acquisitional Rule-based Engine for Discovering Internet-of-Things Devices. USENIX Security Symp. , 2018 . X. Feng, Q. Li, H. Wang, and L. Sun. Acquisitional Rule-based Engine for Discovering Internet-of-Things Devices. USENIX Security Symp., 2018."},{"key":"e_1_3_2_1_18_1","volume-title":"European Conference on Machine Learning and Principles and Practice of Knowledge Discovery in Databases","author":"Seamus D.","year":"2018","unstructured":"D. Seamus , M. Schukat , and E. Barrett . Using Reinforcement Learning to Conceal Honeypot Functionality . European Conference on Machine Learning and Principles and Practice of Knowledge Discovery in Databases , 2018 . D. Seamus, M. Schukat, and E. Barrett. Using Reinforcement Learning to Conceal Honeypot Functionality. European Conference on Machine Learning and Principles and Practice of Knowledge Discovery in Databases, 2018."},{"key":"e_1_3_2_1_19_1","volume-title":"SysFlow: Scalable System Telemetry for Improved Security Analytics. IEEE International Conference on Big Data","author":"Araujo F.","year":"2020","unstructured":"F. Araujo and T. Taylor . SysFlow: Scalable System Telemetry for Improved Security Analytics. IEEE International Conference on Big Data , 2020 . F. Araujo and T. Taylor. SysFlow: Scalable System Telemetry for Improved Security Analytics. IEEE International Conference on Big Data, 2020."},{"key":"e_1_3_2_1_20_1","volume-title":"Mon","author":"Schulman J.","year":"2017","unstructured":"J. Schulman , F. Wolski , P. Dhariwal , A. Radford , and O. Klimov . Proximal Policy Optimization Algorithms. CoRR, abs\/1707.06347 , Mon 2017 . J. Schulman, F. Wolski, P. Dhariwal, A. Radford, and O. Klimov. Proximal Policy Optimization Algorithms. CoRR, abs\/1707.06347, Mon 2017."},{"key":"e_1_3_2_1_21_1","volume-title":"Nature","author":"Mnih V.","year":"2015","unstructured":"V. Mnih , K. Kavukcuoglu , D. Silver , A. Rusu , J. Veness , M. Bellemare , A. Graves , M. Riedmiller , A. Fidjeland , G. Ostrovski , Human-level control through deep reinforcement learning . Nature , Feb 2015 . V. Mnih, K. Kavukcuoglu, D. Silver, A. Rusu, J. Veness, M. Bellemare, A. Graves, M. Riedmiller, A. Fidjeland, G. Ostrovski, et al. Human-level control through deep reinforcement learning. Nature, Feb 2015."},{"key":"e_1_3_2_1_22_1","volume-title":"Asynchronous Methods for Deep Reinforcement Learning. International Conference on Machine Learning (ICML)","author":"Mnih V.","year":"2016","unstructured":"V. Mnih , A. Badia , M. Mirza , A. Graves , T. Lillicrap , T. Harley , D. Silver , and K. Kavukcuoglu . Asynchronous Methods for Deep Reinforcement Learning. International Conference on Machine Learning (ICML) , 2016 . V. Mnih, A. Badia, M. Mirza, A. Graves, T. Lillicrap, T. Harley, D. Silver, and K. Kavukcuoglu. Asynchronous Methods for Deep Reinforcement Learning. International Conference on Machine Learning (ICML), 2016."},{"key":"e_1_3_2_1_23_1","volume-title":"Openai gym. arXiv preprint arXiv:1606.01540","author":"Brockman G.","year":"2016","unstructured":"G. Brockman , V. Cheung , L. Pettersson , J. Schneider , J. Schulman , J. Tang , and W. Zaremba . Openai gym. arXiv preprint arXiv:1606.01540 , 2016 . G. Brockman, V. Cheung, L. Pettersson, J. Schneider, J. Schulman, J. Tang, and W. Zaremba. Openai gym. arXiv preprint arXiv:1606.01540, 2016."},{"key":"e_1_3_2_1_24_1","author":"Raffin A.","year":"2021","unstructured":"A. Raffin , A. Hill , A. Gleave , A. Kanervisto , M. Ernestus , and N. Dormann . StableBaselines3: Reliable Reinforcement Learning Implementations. Journal of Machine Learning Research , Nov 2021 . A. Raffin, A. Hill, A. Gleave, A. Kanervisto, M. Ernestus, and N. Dormann. StableBaselines3: Reliable Reinforcement Learning Implementations. Journal of Machine Learning Research, Nov 2021.","journal-title":"Journal of Machine Learning Research"},{"key":"e_1_3_2_1_25_1","author":"Marchal S.","year":"2019","unstructured":"S. Marchal , M. Miettinen , T. Nguyen , A. Sadeghi , and N. Asokan . AuDI: Toward Autonomous IoT Device-Type Identification Using Periodic Communication. IEEE Journal on Selected Areas in Commun. (JSAC) , March 2019 . S. Marchal, M. Miettinen, T. Nguyen, A. Sadeghi, and N. Asokan. AuDI: Toward Autonomous IoT Device-Type Identification Using Periodic Communication. IEEE Journal on Selected Areas in Commun. (JSAC), March 2019.","journal-title":"IEEE Journal on Selected Areas in Commun. (JSAC)"},{"key":"e_1_3_2_1_26_1","doi-asserted-by":"publisher","DOI":"10.1145\/3548606.3560640"},{"key":"e_1_3_2_1_27_1","doi-asserted-by":"publisher","DOI":"10.14722\/ndss.2017.23465"},{"key":"e_1_3_2_1_28_1","author":"Needleman S.","year":"1970","unstructured":"S. Needleman and C. Wunsch . A general method applicable to the search for similarities in the amino acid sequence of two proteins. Journal of Molecular Biology , Mar 1970 . S. Needleman and C. Wunsch. A general method applicable to the search for similarities in the amino acid sequence of two proteins. Journal of Molecular Biology, Mar 1970.","journal-title":"Journal of Molecular Biology"},{"key":"e_1_3_2_1_29_1","unstructured":"VirusTotal. https:\/\/www.virustotal.com\/.  VirusTotal. https:\/\/www.virustotal.com\/."},{"key":"e_1_3_2_1_30_1","unstructured":"Snare: Super Next generation Advanced reactive honeypot. https:\/\/github.com\/mushorg\/snare.  Snare: Super Next generation Advanced reactive honeypot. https:\/\/github.com\/mushorg\/snare."},{"key":"e_1_3_2_1_31_1","unstructured":"T-Pot - The All In One Honeypot Platform. https:\/\/github.com\/telekomsecurity\/tpotce.  T-Pot - The All In One Honeypot Platform. https:\/\/github.com\/telekomsecurity\/tpotce."},{"key":"e_1_3_2_1_32_1","doi-asserted-by":"publisher","DOI":"10.1145\/3055186.3055192"},{"key":"e_1_3_2_1_33_1","volume-title":"IoTCMal: Towards a Hybrid IoT Honeypot for Capturing and Analyzing Malware","author":"Wang B.","year":"2020","unstructured":"B. Wang , Y. Dou , Y. Sang , Y. Zhang , and J. Huang . IoTCMal: Towards a Hybrid IoT Honeypot for Capturing and Analyzing Malware . In IEEE Int'l Conf. on Commun. (ICC) , 2020 . B. Wang, Y. Dou, Y. Sang, Y. Zhang, and J. Huang. IoTCMal: Towards a Hybrid IoT Honeypot for Capturing and Analyzing Malware. In IEEE Int'l Conf. on Commun. (ICC), 2020."},{"key":"e_1_3_2_1_34_1","doi-asserted-by":"publisher","DOI":"10.1109\/CNS.2017.8228653"},{"key":"e_1_3_2_1_35_1","author":"Zarca A.","year":"2020","unstructured":"A. Zarca , J. Bernabe , A. Skarmeta , and J. Calero . Virtual IoT HoneyNets to mitigate cyberattacks in SDN\/NFV-enabled IoT networks. IEEE Journal on Selected Areas in Commun. , April 2020 . A. Zarca, J. Bernabe, A. Skarmeta, and J. Calero. Virtual IoT HoneyNets to mitigate cyberattacks in SDN\/NFV-enabled IoT networks. IEEE Journal on Selected Areas in Commun., April 2020.","journal-title":"IEEE Journal on Selected Areas in Commun."},{"key":"e_1_3_2_1_36_1","volume-title":"USENIX Security Symp.","author":"Provos N.","year":"2004","unstructured":"N. Provos . Honeyd : A virtual honeypot framework . USENIX Security Symp. , 2004 . N. Provos. Honeyd: A virtual honeypot framework. USENIX Security Symp., 2004."},{"key":"e_1_3_2_1_37_1","doi-asserted-by":"publisher","DOI":"10.1007\/11856214_9"},{"key":"e_1_3_2_1_38_1","volume-title":"Conf. (IPCCC)","author":"Hakim M.","year":"2018","unstructured":"M. Hakim , H. Aksu , A. Uluagac , and K. Akkaya . U-PoT: A Honeypot Framework for UPnP-Based IoT Devices. IEEE Int'l Performance Computing and Commun . Conf. (IPCCC) , 2018 . M. Hakim, H. Aksu, A. Uluagac, and K. Akkaya. U-PoT: A Honeypot Framework for UPnP-Based IoT Devices. IEEE Int'l Performance Computing and Commun. Conf. (IPCCC), 2018."},{"key":"e_1_3_2_1_39_1","doi-asserted-by":"publisher","DOI":"10.1109\/CNS56114.2022.9947265"},{"key":"e_1_3_2_1_40_1","volume-title":"Honware: A Virtual Honeypot Framework for Capturing CPE and IoT Zero Days. APWG Symp. on Electronic Crime Research","author":"Vetterl A.","year":"2019","unstructured":"A. Vetterl , and R. Clayton . Honware: A Virtual Honeypot Framework for Capturing CPE and IoT Zero Days. APWG Symp. on Electronic Crime Research , 2019 . A. Vetterl, and R. Clayton. Honware: A Virtual Honeypot Framework for Capturing CPE and IoT Zero Days. APWG Symp. on Electronic Crime Research, 2019."},{"key":"e_1_3_2_1_41_1","doi-asserted-by":"publisher","DOI":"10.1145\/3307334.3326083"},{"key":"e_1_3_2_1_42_1","doi-asserted-by":"publisher","DOI":"10.1145\/3292006.3300024"},{"key":"e_1_3_2_1_43_1","volume-title":"Black Hat","author":"Luo T.","year":"2017","unstructured":"T. Luo , Z. Xu , X. Jin , Y. Jia , and X. Ouyang . IoTCandyJar: Towards an IntelligentInteraction Honeypot for IoT Devices . Black Hat , 2017 T. Luo, Z. Xu, X. Jin, Y. Jia, and X. Ouyang. IoTCandyJar: Towards an IntelligentInteraction Honeypot for IoT Devices. Black Hat, 2017"}],"event":{"name":"WiSec '23: 16th ACM Conference on Security and Privacy in Wireless and Mobile Networks","location":"Guildford United Kingdom","acronym":"WiSec '23","sponsor":["SIGSAC ACM Special Interest Group on Security, Audit, and Control","SIGMOBILE ACM Special Interest Group on Mobility of Systems, Users, Data and Computing"]},"container-title":["Proceedings of the 16th ACM Conference on Security and Privacy in Wireless and Mobile Networks"],"original-title":[],"link":[{"URL":"https:\/\/dl.acm.org\/doi\/10.1145\/3558482.3590195","content-type":"unspecified","content-version":"vor","intended-application":"text-mining"},{"URL":"https:\/\/dl.acm.org\/doi\/pdf\/10.1145\/3558482.3590195","content-type":"application\/pdf","content-version":"vor","intended-application":"syndication"},{"URL":"https:\/\/dl.acm.org\/doi\/pdf\/10.1145\/3558482.3590195","content-type":"unspecified","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2025,6,17]],"date-time":"2025-06-17T16:47:08Z","timestamp":1750178828000},"score":1,"resource":{"primary":{"URL":"https:\/\/dl.acm.org\/doi\/10.1145\/3558482.3590195"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2023,5,29]]},"references-count":43,"alternative-id":["10.1145\/3558482.3590195","10.1145\/3558482"],"URL":"https:\/\/doi.org\/10.1145\/3558482.3590195","relation":{},"subject":[],"published":{"date-parts":[[2023,5,29]]},"assertion":[{"value":"2023-06-28","order":2,"name":"published","label":"Published","group":{"name":"publication_history","label":"Publication History"}}]}}