paper-with-me

Papers

A Data Science Approach for Honeypot Detection in Ethereum

2019-10-03 · Ramiro Camino, Christof Ferreira Torres, Mathis Baden, Radu State

Ethereum smart contracts have recently drawn a considerable amount of attention from the media, the financial industry and academia. With the increase in popularity, malicious users found new opportunities to profit by deceiving newcomers. Consequently, attackers started luring other attackers into contracts that seem to have exploitable flaws, but that actually contain a complex hidden trap that in the end benefits the contract creator. In the blockchain community, these contracts are known as honeypots. A recent study presented a tool called HONEYBADGER that uses symbolic execution to detect honeypots by analyzing contract bytecode. In this paper, we present a data science detection approach based foremost on the contract transaction behavior. We create a partition of all the possible cases of fund movements between the contract creator, the contract, the transaction sender and other participants. To this end, we add transaction aggregated features, such as the number of transactions and the corresponding mean value and other contract features, for example compilation information and source code length. We find that all aforementioned categories of features contain useful information for the detection of honeypots. Moreover, our approach allows us to detect new, previously undetected honeypots of already known techniques. We furthermore employ our method to test the detection of unknown honeypot techniques by sequentially removing one technique from the training set. We show that our method is capable of discovering the removed honeypot techniques. Finally, we discovered two new techniques that were previously not known.

📄 PDF Abstract BibTeX arXiv:1910.01449

Code (1)

rcamino/honeypot-detection 공식 구현

Methods 이 논문이 사용한 방법론

Test 설명 없음

Similar Papers 제목 키워드 기반

Slow is Fast! Dissecting Ethereum's Slow Liquidity Drain Scams

2025-03-06 · Minh Trung Tran, Nasrin Sohrabi, Zahir Tari, Qin Wang 외

We identify the slow liquidity drain (SLID) scam, an insidious and highly profitable threat to decentralized finance (DeFi), posing a large-scale, persistent, and growing risk to the ecosystem. Unlike traditional scams s…

Honeyval: A Comprehensive Evaluation Framework for LLM-powered HTTP Honeypots

2026-05-28 · Mark Vero, Fabian Kaczmarczyck, Ivan Petrov, Ilia Shumailov 외 arxiv

Honeypots are decoy systems mimicking real system components designed to defend against cyber attacks. Recently, LLMs increasingly serve as simulation backbones for honeypots. They enable defenders to construct high-inte…

A Partial Break of the Honeypots Defense to Catch Adversarial Attacks

2020-09-23 · Nicholas Carlini

A recent defense proposes to inject "honeypots" into neural networks in order to detect adversarial attacks. We break the baseline version of this defense by reducing the detection true positive rate to 0\% and the detec…

LLM in the Shell: Generative Honeypots

2023-08-31 · Muris Sladić, Veronica Valeros, Carlos Catania, Sebastian Garcia

Honeypots are essential tools in cybersecurity for early detection, threat intelligence gathering, and analysis of attacker's behavior. However, most of them lack the required realism to engage and fool human attackers l…

A Generative Model Based Honeypot for Industrial OPC UA Communication

2024-10-28 · Olaf Sassnick, Georg Schäfer, Thomas Rosenstatter, Stefan Huber

Industrial Operational Technology (OT) systems are increasingly targeted by cyber-attacks due to their integration with Information Technology (IT) systems in the Industry 4.0 era. Besides intrusion detection systems, ho…

Intrusion Detection