Attacker Profiling Through Analysis of Attack Patterns in Geographically Distributed Honeypots. (arXiv:2305.01346v1 [cs.CR])

Honeypots are a well-known and widely used technology in the cybersecurity
community, where it is assumed that placing honeypots in different geographical
locations provides better visibility and increases effectiveness. However, how
geolocation affects the usefulness of honeypots is not well-studied, especially
for threat intelligence as early warning systems. This paper examines attack
patterns in a large public dataset of geographically distributed honeypots by
answering methodological questions and creating behavioural profiles of
attackers. Results show that the location of honeypots helps …

analysis attack community cybersecurity cybersecurity community distributed geolocation honeypots intelligence patterns profiling technology threat threat intelligence visibility warning well-known