INTERCEPT+: Web Application Honeypot Data for Attack Isolation

INTERCEPT+ is a honeypot system for web applications designed by Ayumu Hirata of The University of Tokyo. The system employs virtual machine migration and OpenFlow network control to automatically isolate attackers from real servers to honey servers. The dataset likely contains information related to network traffic, attack patterns, and system interactions from this honeypot environment.

Use Cases

• Modeling attacker behavior based on traffic isolated to the honey web server.
• Training anomaly detection systems on network traffic controlled via OpenFlow.
• Studying the effectiveness of memory and storage deception in virtual machine-based honeypots.

Strengths

• The honeypot design replicates the memory and storage devices of real systems, potentially providing realistic attack data.
• The approach uses OpenFlow for network traffic control, suggesting structured network data.

Limitations

• Row count is unknown, which may limit suitability assessment.
• Column-level documentation is absent; field semantics must be inferred after download.
• Last update date is unknown; freshness unverified.

Provenance

Source

The University of Tokyo

Collection Method

Likely generated from the INTERCEPT+ honeypot system using virtual machine migration and OpenFlow.