activity
20162025
most citedA Survey on Honeypot Software and Data Analysis

128 citations · 300 across the 14 of their papers we have counts for

collaborators
Showing cs.CRShow all

7 papers · 1 filter

cs.CR2024★ 19 cited

The Age of DDoScovery: An Empirical Comparison of Industry and Academic DDoS Assessments

Raphael Hiesgen, Marcin Nawrocki, Marinho Barcellos +14

Motivated by the impressive but diffuse scope of DDoS research and reporting, we undertake a multistakeholder (joint industry-academic) analysis to seek convergence across the best…

cs.CR2023★ 5 cited

Pool Inference Attacks on Local Differential Privacy: Quantifying the Privacy Guarantees of Apple's Count Mean Sketch in Practice

Andrea Gadotti, Florimond Houssiau, Meenatchi Sundaram Muthu Selva Annamalai +1

Behavioral data generated by users' devices, ranging from emoji use to pages visited, are collected at scale to improve apps and services. These data, however, contain fine-grained…

cs.CR2023★ 11 cited

SoK: A Data-driven View on Methods to Detect Reflective Amplification DDoS Attacks Using Honeypots

Marcin Nawrocki, John Kristoff, Raphael Hiesgen +3

In this paper, we revisit the use of honeypots for detecting reflective amplification attacks. These measurement tools require careful design of both data collection and data analy…

cs.CR2022★ 33 cited

The Race to the Vulnerable: Measuring the Log4j Shell Incident

Raphael Hiesgen, Marcin Nawrocki, Thomas C. Schmidt +1

The critical remote-code-execution (RCE) Log4Shell is a severe vulnerability that was disclosed to the public on December 10, 2021. It exploits a bug in the wide-spread Log4j libra…

cs.CR2021★ 3 cited

Spoki: Unveiling a New Wave of Scanners through a Reactive Network Telescope

Raphael Hiesgen, Marcin Nawrocki, Alistair King +3

Large-scale Internet scans are a common method to identify victims of a specific attack. Stateless scanning like in ZMap has been established as an efficient approach to probing at…

cs.CR2021★ 28 cited

The Far Side of DNS Amplification: Tracing the DDoS Attack Ecosystem from the Internet Core

Marcin Nawrocki, Mattijs Jonker, Thomas C. Schmidt +1

In this paper, we shed new light on the DNS amplification ecosystem, by studying complementary data sources, bolstered by orthogonal methodologies. First, we introduce a passive at…

cs.CR2016★ 128 cited

A Survey on Honeypot Software and Data Analysis

Marcin Nawrocki, Matthias Wählisch, Thomas C. Schmidt +2

In this survey, we give an extensive overview on honeypots. This includes not only honeypot software but also methodologies to analyse honeypot data.