XT-Pot: eXposing Threat Category of Honeypot-based attacks

XT-Pot: eXposing Threat Category of Honeypot-based attacks

연구 분야: Safety

학회: ICONETSI '20: Proceedings of the 2020 International Conference on Engineering and Information Technology for Sustainable Industry

As organization infrastructure is getting more complex to support its business, cyber security threat monitoring on the infrastructure for the emerging threats becomes essential. Honeypot, a decoy system, when properly deployed in the organization's network provides valuable insight into the behavior of attacker to the organization. In this research, we propose a generic framework to analyze and categorize threats collected from honeypots. These threat categories become the building block of threat intelligence to be shared used by security analyst in handling security incidents.