人类剥削后行为的定性实证分析
A Qualitative Empirical Analysis of Human Post-Exploitation Behavior
摘要：
蜜罐技术是网络安全领域中一种被广泛研究的防御措施。这项工作提出了一个有效的低成本的蜜罐，易于部署和维护。在这项工作中引入的蜜罐能够以非标准的方式处理命令，通过阻止它们或对攻击者进行侮辱来回复。为了确定最有效的防御策略，攻击者和防御者之间的相互作用被建模为贝叶斯两人博弈。为了进行实证分析，我们部署了三个蜜罐实例，每个实例的配置都略有不同。总共捕获了200多个不同的会话，从而可以对开发后的行为进行定性评估。调查结果显示，攻击者对侮辱和阻止命令的反应不同，从忽视到自己发送侮辱。这项工作的主要贡献在于拟议的框架，它为技术上更复杂和资源密集的办法提供了一种低成本的替代办法。
英文摘要：
Honeypots are a well-studied defensive measure in network security. This work proposes an effective low-cost honeypot that is easy to deploy and maintain. The honeypot introduced in this work is able to handle commands in a non-standard way by blocking them or replying with an insult to the attacker. To determine the most efficient defense strategy, the interaction between attacker and defender is modeled as a Bayesian two-player game. For the empirical analysis, three honeypot instances were deployed, each with a slight variation in its configuration. In total, over 200 distinct sessions were captured, which allows for qualitative evaluation of post-exploitation behavior. The findings show that attackers react to insults and blocked commands in different ways, ranging from ignoring to sending insults themselves. The main contribution of this work lies in the proposed framework, which offers a low-cost alternative to more technically sophisticated and resource-intensive approaches.
机构、总结、中文摘要均由AI分析而来，可能存在错误，请以论文正文为准。
