Deception Technologies for Honeypots with Intelligence and Adaptability #

DeceptIA is an associate team between Inria RESIST and PIRAT research groups in France, the Osaka Metropolitan University (OMU, Japan), the University of Tokyo (UTokyo, Japan) and the German Research Center for Artificial Intelligence (DFKI Kaiserslautern, Germany).

Research direction #

In this associate team, we address the global and local cybersecurity issues and define the following three research questions (RQs).

• RQ1: What are the characteristics of new anomalous traffic observed in large-scale honeypots deployed across multiple geolocations and services?
• RQ2: How can we make honeypots adapt on-the-fly to the attacker’s behavior and also evolve interaction between them?
• RQ3: How can we develop an effective phishing detection system that not only accurately identifies phishing attacks, but also educates and explains the risks to end-users in a way that increases their awareness and resilience to future phishing attempts?

To solve these research questions, we deploy honeypots related to various locations (e.g., Japan, France,Germany) and various services (e.g., research institutes, cloud, home, edge), and conduct experiments and analysis of anomalous traffic.