This paper shows the usefulness of using simple honeypots to obtain data for a better understanding of some internet attack processes. The acquired knowledge can then be used to drive sound security design decisions in order to improve the ability of our systems to resist to attacks. Based on three years of collected data, we provide in this paper a critical review of geographical information provided by NetGeo, a study of the aftermath of the Deloder worm and a refined analysis of the interaction between machines devoted to scan and to attack.
Understanding threats: A prerequisite to enhance survivability of computing systems
International Journal of Critical Infrastructures, Volume 4, N°1-2, 2008, p 153-171
© Inderscience. Personal use of this material is permitted. The definitive version of this paper was published in International Journal of Critical Infrastructures, Volume 4, N°1-2, 2008, p 153-171 and is available at : http://dx.doi.org/10.1504/IJCIS.2008.016098
PERMALINK : https://www.eurecom.fr/publication/2492