Causal analysis of attacks against honeypots based on properties of countries. (1st September 2019)

• Record Type: Journal Article
• Authors: Zuzčák, Matej; Bujok, Petr
• Is Part Of: IET information security. Volume 13:Number 5(2019)
• Page Start: 435
• Page End: 447
• Publication Date: 2019-09-01
• Subjects: security of data -- least squares approximations -- statistical analysis; secure shell attacks -- statistical models -- developing countries -- influential attributes -- country attributes -- author honeynet; Computer security -- Periodicals; Cryptography -- Periodicals; Computer networks -- Security measures -- Periodicals; Database security -- Periodicals; 005.8
• DOI: 10.1049/iet-ifs.2018.5141
• Languages: English
• ISSNs: 1751-8709

Abstract

Abstract : This study studies the influence of country attributes on the number of secure shell attacks originating from it detected by the author's honeynet. Four statistical models are described, based on three sources of data from various countries. The studied attributes of the countries can be broadly divided into demographic, technological, and economic, with each source providing a slightly different set of attributes. Statistical methods such as partial least‐squares path modelling are used, clustering countries by their assessed similarity. The population size has the greatest effect on the number of attacks, as expected, though it has to be noted that developing countries did not provide relevant data to the sources used and thus were not included. The following influential attributes were technical such as the access to information and communication technologies (ICT), and the use of ICT, with the economic influence being notable only in rather small countries. The Netherlands was an interesting anomaly, being clustered alongside large countries, even though its country attributes were very much like those of its neighbours.