Skip to main content
22
Views
327
Downloads
Reviewed article

Self-Advertising Attack Surfaces for Web Application Honeypots: New Technology to Managing Cyber Disasters

How to cite:
Banyatsang Mphago, Dimane Mpoeleng, Shedden Masupe, Oteng Tabona
"Self-Advertising Attack Surfaces for Web Application Honeypots: New Technology to Managing Cyber Disasters"
Information & Security: An International Journal,
40
no. 2
(2018):
189-202.
https://doi.org/10.11610/isij.4014

Self-Advertising Attack Surfaces for Web Application Honeypots: New Technology to Managing Cyber Disasters

Source:

Information & Security: An International Journal,
Volume: 40,
Issue2,
p.189-202
(2018)

Abstract:

Honeypots are security tools often used to attract and learn attackers’ methods or divert their attention to unimportant resources. In order to achieve their goal, honeypots need to be identified by the attackers, and this is often the challenge with most deployments of honeypots. This paper therefore explores the use of attack surface sizes in web application honeypots to self-advertise their honeypots to the attackers. PageRank, which is a system that ranks pages on the web through outward link analysis, ranks important pages as seen by their users at the top of the search results. Therefore, the paper argues that vulnerable pages on the web, thus applications with large attack surface, are also important to attackers. Therefore, if pages are ranked based on their importance as seen by their users, pages with large attack surface should rank high when attackers search for them. To design a large attack surface, attack surface parameters can be strategically placed in a template as different parameters affect the attack surface differently when placed in a particular way.

22
Views
327
Downloads