@inproceedings{agrawal2022long-term, author = {Agrawal, Rakshit and Stokes, Jay and Rist, Lukas and Littlefield, Ryan and Fan, Xun and Hollis, Ken and Coppedge, Zane and Chesterman, Noah and Seifert, Christian}, title = {Long-Term Study of Honeypots in a Public Cloud}, organization = {IEEE}, booktitle = {2022 52nd Annual IEEE/IFIP International Conference on Dependable Systems and Networks}, year = {2022}, month = {June}, abstract = {Public cloud hosting environments offer convenient computation and storage resources for cloud service providers, and these resources are also beneficial for adversaries to host malicious web-based attacks. As a result, cloud-based virtual machines are often attacked. In the paper, we conduct a long-term deployment and analysis of honeypots in a public cloud hosting environment. In particular, we deploy five low-interaction honeypots and one medium-interaction honeypot and measure the attack patterns over eleven months. In our study, we found that the low-interaction honeypots were attacked repeatedly, but the activity on the medium-interaction honeypot was small. We first provide an overview of the attack traffic activity. We then use Latent Dirichlet Allocation (LDA) to discover topics in the log data.}, publisher = {IEEE}, url = {http://approjects.co.za/?big=en-us/research/publication/long-term-study-of-honeypots-in-a-public-cloud/}, }