{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2026,1,25]],"date-time":"2026-01-25T04:42:56Z","timestamp":1769316176741,"version":"3.49.0"},"reference-count":27,"publisher":"IEEE","license":[{"start":{"date-parts":[[2022,6,1]],"date-time":"2022-06-01T00:00:00Z","timestamp":1654041600000},"content-version":"stm-asf","delay-in-days":0,"URL":"https:\/\/linproxy.fan.workers.dev:443\/https\/doi.org\/10.15223\/policy-029"},{"start":{"date-parts":[[2022,6,1]],"date-time":"2022-06-01T00:00:00Z","timestamp":1654041600000},"content-version":"stm-asf","delay-in-days":0,"URL":"https:\/\/linproxy.fan.workers.dev:443\/https\/doi.org\/10.15223\/policy-037"}],"content-domain":{"domain":[],"crossmark-restriction":false},"short-container-title":[],"published-print":{"date-parts":[[2022,6]]},"DOI":"10.1109\/eurospw55150.2022.00052","type":"proceedings-article","created":{"date-parts":[[2022,6,27]],"date-time":"2022-06-27T21:22:52Z","timestamp":1656364972000},"page":"442-447","source":"Crossref","is-referenced-by-count":13,"title":["Deceptive directories and \u201cvulnerable\u201d logs: a honeypot study of the LDAP and log4j attack landscape"],"prefix":"10.1109","author":[{"given":"Shreyas","family":"Srinivasa","sequence":"first","affiliation":[{"name":"Aalborg University,Copenhagen,Denmark"}]},{"given":"Jens Myrup","family":"Pedersen","sequence":"additional","affiliation":[{"name":"Aalborg University,Copenhagen,Denmark"}]},{"given":"Emmanouil","family":"Vasilomanolakis","sequence":"additional","affiliation":[{"name":"Aalborg University,Copenhagen,Denmark"}]}],"member":"263","reference":[{"key":"ref10","first-page":"1127","article-title":"Examining the efficacy of decoy-based and psycho-logical cyber deception","author":"ferguson-walter","year":"0","journal-title":"30th USENIX Security Symposium (USENIX Security 21)"},{"key":"ref11","article-title":"Ldap vulnerabilities and disclosures","year":"2021","journal-title":"MITRE"},{"key":"ref12","year":"2021","journal-title":"Cve-2021&#x2013;44228"},{"key":"ref13","first-page":"63","year":"2005","journal-title":"Windows Honeypot Modeling"},{"key":"ref14","first-page":"4","article-title":"Honeyd-a virtual honeypot daemon","volume":"2","author":"provos","year":"2003","journal-title":"10th DFN-CERT Workshop"},{"key":"ref15","author":"provos","year":"2007","journal-title":"Virtual Honeypots From Botnet Tracking to Intrusion Detection"},{"key":"ref16","first-page":"1","article-title":"A virtual honeypot framework","volume":"173","author":"provos","year":"0","journal-title":"USENIX Security Symposium"},{"key":"ref17","article-title":"Deep generative models to extend active directory graphs with honeypot users","author":"lukas","year":"2021","journal-title":"ArXiv Preprint"},{"key":"ref18","author":"security","year":"2022","journal-title":"T-Pot - The All In One Honeypot Platform"},{"key":"ref19","author":"thomas","year":"2022","journal-title":"A honeypot for the log4shell vulnerability (eve-2021&#x2013;44228)"},{"key":"ref4","doi-asserted-by":"publisher","DOI":"10.4236\/jis.2011.24015"},{"key":"ref27","author":"reimer","year":"2009","journal-title":"Active Directory&#x00AE; for Microsoft&#x00AE; Windows&#x00AE; Server 2003 Technical Reference"},{"key":"ref3","doi-asserted-by":"publisher","DOI":"10.17487\/rfc2251"},{"key":"ref6","first-page":"3165","article-title":"Injection attacks reloaded: Tunnelling malicious payloads over dns","author":"jeitner","year":"0","journal-title":"30th USENIX Security Symposium (USENIX Security 21)"},{"key":"ref5","doi-asserted-by":"publisher","DOI":"10.1109\/ICCS.2008.4737330"},{"key":"ref8","article-title":"Project sonar","year":"2021","journal-title":"Rapid7"},{"key":"ref7","author":"claudio","year":"2021","journal-title":"Enisa threat landscape report 2021"},{"key":"ref2","doi-asserted-by":"publisher","DOI":"10.1016\/0169-7552(91)90071-J"},{"key":"ref9","author":"project","year":"2021","journal-title":"The Honeynet Project"},{"key":"ref1","doi-asserted-by":"publisher","DOI":"10.17487\/rfc1202"},{"key":"ref20","year":"2022","journal-title":"Greedybear honeypot feed Honeynet Project"},{"key":"ref22","article-title":"Apache directory","year":"2021","journal-title":"Apache"},{"key":"ref21","article-title":"Riotpot: a modular hybrid-interaction iot\/ot honeypot","author":"srinivasa","year":"0","journal-title":"26th European Symposium on Research in Computer Security (ESORICS) 2021"},{"key":"ref24","year":"2021","journal-title":"Opendj"},{"key":"ref23","author":"kuzn\u00edk","year":"2021","journal-title":"OpenLDAP"},{"key":"ref26","author":"lyon","year":"2021","journal-title":"Nmap Network Mapper"},{"key":"ref25","article-title":"Cve-2021&#x2013;44832","year":"2021","journal-title":"Apache Software Foundation"}],"event":{"name":"2022 IEEE European Symposium on Security and Privacy Workshops (EuroS&PW)","location":"Genoa, Italy","start":{"date-parts":[[2022,6,6]]},"end":{"date-parts":[[2022,6,10]]}},"container-title":["2022 IEEE European Symposium on Security and Privacy Workshops (EuroS&amp;PW)"],"original-title":[],"link":[{"URL":"https:\/\/linproxy.fan.workers.dev:443\/http\/xplorestaging.ieee.org\/ielx7\/9799286\/9799291\/09799363.pdf?arnumber=9799363","content-type":"unspecified","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2022,7,25]],"date-time":"2022-07-25T20:18:07Z","timestamp":1658780287000},"score":1,"resource":{"primary":{"URL":"https:\/\/linproxy.fan.workers.dev:443\/https\/ieeexplore.ieee.org\/document\/9799363\/"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2022,6]]},"references-count":27,"URL":"https:\/\/linproxy.fan.workers.dev:443\/https\/doi.org\/10.1109\/eurospw55150.2022.00052","relation":{},"subject":[],"published":{"date-parts":[[2022,6]]}}}