Lessons learned from correlation of honeypots' data and spatial data

摘要

Honeypots and honeynets are unconventional security tools for the purpose of studying techniques, methods, tools, and goals of attackers. Analysis of data collected by these security tools is important for network security. In this paper, we focus on information about the locations, shapes of geographic features and the relationships between them, usually stored as coordinates and topology (spatial data). We discuss specific spatial data related to countries and analyse them in relationship to number of attempted attacks collected by honeypots. In the paper, we analyse the relationship between the spatial data and number of attempted attacks and properties of countries, from which attackers attack. We found that there is relationship between the spatial data related to countries and number of attempted attacks. Also the number of attacks is related to active population who use the Internet and level of infrastructure and service provision of country.