Collection and Analysis of attack data based on Honeypots deployed on the Internet

E. Alata, M. Dacier, Y. Deswarte, M. Kaaâniche, K. Kortchinsky, V. Nicomette, V. H. Pham, F. Pouget

Research output: Contribution to journalArticlepeer-review

10 Scopus citations


The CADHo project (Collection and Analysis of Data from Honeypots) is an ongoing research action funded by the French ACI "Securiteé & Informatique" [1]. It aims at building an environment to better understand threats on the Internet and also at providing models to analyze the observed phenomena. Our approach consists in deploying and sharing with the scientific community a distributed platform based on honeypots that gathers data suitable to analyze the attack processes targeting machines connected to the Internet. This distributed platform, called Leurreé.com and administrated by Institut Eurecom, offers each partner collaborating to this initiative access to all collected data in order to carry out statistical analyzes and modeling activities. So far, about thirty honeypots have been operational for several months in twenty countries of the five continents. This paper presents a brief overview of this distributed platform and examples of results derived from the data. It also outlines the approach investigated to model observed attack processes and to describe the intruders behaviors once they manage to get access to a target machine. © 2006 Springer Science+Business Media, LLC.
Original languageEnglish (US)
Pages (from-to)79-91
Number of pages13
JournalAdvances in Information Security
StatePublished - Jan 1 2006
Externally publishedYes

Bibliographical note

Generated from Scopus record by KAUST IRTS on 2022-09-12

ASJC Scopus subject areas

  • Information Systems
  • Computer Networks and Communications


Dive into the research topics of 'Collection and Analysis of attack data based on Honeypots deployed on the Internet'. Together they form a unique fingerprint.

Cite this