Honeyfile Camouflage: Hiding Fake Files in Plain Sight

Fuente: arXiv
Guardado en:
Detalles Bibliográficos
Autores principales: Timmer, Roelien C., Liebowitz, David, Nepal, Surya, Kanhere, Salil S.
Formato: Preprint
Publicado: 2024
Materias:
Acceso en línea:
Etiquetas: Agregar Etiqueta
Sin Etiquetas, Sea el primero en etiquetar este registro!
_version_ 1866911872435879936
author Timmer, Roelien C.
Liebowitz, David
Nepal, Surya
Kanhere, Salil S.
author_facet Timmer, Roelien C.
Liebowitz, David
Nepal, Surya
Kanhere, Salil S.
contents Honeyfiles are a particularly useful type of honeypot: fake files deployed to detect and infer information from malicious behaviour. This paper considers the challenge of naming honeyfiles so they are camouflaged when placed amongst real files in a file system. Based on cosine distances in semantic vector spaces, we develop two metrics for filename camouflage: one based on simple averaging and one on clustering with mixture fitting. We evaluate and compare the metrics, showing that both perform well on a publicly available GitHub software repository dataset.
format Preprint
id arxiv_https___arxiv_org_abs_2405_04758
institution arXiv
publishDate 2024
record_format arxiv
spellingShingle Honeyfile Camouflage: Hiding Fake Files in Plain Sight
Timmer, Roelien C.
Liebowitz, David
Nepal, Surya
Kanhere, Salil S.
Cryptography and Security
Artificial Intelligence
Computation and Language
Honeyfiles are a particularly useful type of honeypot: fake files deployed to detect and infer information from malicious behaviour. This paper considers the challenge of naming honeyfiles so they are camouflaged when placed amongst real files in a file system. Based on cosine distances in semantic vector spaces, we develop two metrics for filename camouflage: one based on simple averaging and one on clustering with mixture fitting. We evaluate and compare the metrics, showing that both perform well on a publicly available GitHub software repository dataset.
title Honeyfile Camouflage: Hiding Fake Files in Plain Sight
topic Cryptography and Security
Artificial Intelligence
Computation and Language
url https://arxiv.org/abs/2405.04758