Automating the analysis of honeypot data

Olivier Thonnard; Jouni Viinikka; Corrado Leita; Marc Dacier

doi:10.1007/978-3-540-87403-4_29

Automating the analysis of honeypot data

Olivier Thonnard, Jouni Viinikka, Corrado Leita, Marc Dacier

Research output: Chapter in Book/Report/Conference proceeding › Conference contribution

2 Scopus citations

Abstract

We describe the on-going work towards further automating the analysis of data generated by a large honeynet architecture called Leurre.com and SGNET. The underlying motivation is helping us to integrate the use of honeypot data into daily network security monitoring. We propose a system based on two automated steps: i) the detection of relevant attack events within a large honeynet traffic data set, and ii) the extraction of highly similar events based on temporal correlation. © 2008 Springer-Verlag Berlin Heidelberg.

Original language	English (US)
Title of host publication	Lecture Notes in Computer Science (including subseries Lecture Notes in Artificial Intelligence and Lecture Notes in Bioinformatics)
Pages	406-407
Number of pages	2
DOIs	https://doi.org/10.1007/978-3-540-87403-4_29
State	Published - Nov 27 2008
Externally published	Yes

Bibliographical note

Generated from Scopus record by KAUST IRTS on 2022-09-12

ASJC Scopus subject areas

Theoretical Computer Science
General Computer Science

Access to Document

10.1007/978-3-540-87403-4_29

Cite this

@inproceedings{a5930d2322484a03aaf956a72ec131ba,

title = "Automating the analysis of honeypot data",

abstract = "We describe the on-going work towards further automating the analysis of data generated by a large honeynet architecture called Leurre.com and SGNET. The underlying motivation is helping us to integrate the use of honeypot data into daily network security monitoring. We propose a system based on two automated steps: i) the detection of relevant attack events within a large honeynet traffic data set, and ii) the extraction of highly similar events based on temporal correlation. {\textcopyright} 2008 Springer-Verlag Berlin Heidelberg.",

author = "Olivier Thonnard and Jouni Viinikka and Corrado Leita and Marc Dacier",

note = "Generated from Scopus record by KAUST IRTS on 2022-09-12",

year = "2008",

month = nov,

day = "27",

doi = "10.1007/978-3-540-87403-4_29",

language = "English (US)",

isbn = "354087402X",

pages = "406--407",

booktitle = "Lecture Notes in Computer Science (including subseries Lecture Notes in Artificial Intelligence and Lecture Notes in Bioinformatics)",

}

TY - GEN

T1 - Automating the analysis of honeypot data

AU - Thonnard, Olivier

AU - Viinikka, Jouni

AU - Leita, Corrado

AU - Dacier, Marc

N1 - Generated from Scopus record by KAUST IRTS on 2022-09-12

PY - 2008/11/27

Y1 - 2008/11/27

N2 - We describe the on-going work towards further automating the analysis of data generated by a large honeynet architecture called Leurre.com and SGNET. The underlying motivation is helping us to integrate the use of honeypot data into daily network security monitoring. We propose a system based on two automated steps: i) the detection of relevant attack events within a large honeynet traffic data set, and ii) the extraction of highly similar events based on temporal correlation. © 2008 Springer-Verlag Berlin Heidelberg.

AB - We describe the on-going work towards further automating the analysis of data generated by a large honeynet architecture called Leurre.com and SGNET. The underlying motivation is helping us to integrate the use of honeypot data into daily network security monitoring. We propose a system based on two automated steps: i) the detection of relevant attack events within a large honeynet traffic data set, and ii) the extraction of highly similar events based on temporal correlation. © 2008 Springer-Verlag Berlin Heidelberg.

UR - http://link.springer.com/10.1007/978-3-540-87403-4_29

UR - http://www.scopus.com/inward/record.url?scp=56549126489&partnerID=8YFLogxK

U2 - 10.1007/978-3-540-87403-4_29

DO - 10.1007/978-3-540-87403-4_29

M3 - Conference contribution

SN - 354087402X

SP - 406

EP - 407

BT - Lecture Notes in Computer Science (including subseries Lecture Notes in Artificial Intelligence and Lecture Notes in Bioinformatics)

ER -

Automating the analysis of honeypot data

Abstract

Bibliographical note

ASJC Scopus subject areas

Access to Document

Other files and links

Fingerprint

Cite this