文章基本信息

标题：Visualisation of Honeypot Data Using Graphviz and Afterglow
本地全文：下载
作者：Craig Valli
期刊名称：Journal of Digital Forensics, Security and Law
印刷版ISSN：1558-7215
电子版ISSN：1558-7223
出版年度：2009
卷号：2
期号：1702
页码：27-38
语种：English
出版社：Association of Digital Forensics, Security and Law
摘要：This research in progress paper explores the use of Graphviz and Afterglow for the analysis of data emanating from a honeypot system. Honeypot systems gather a wide range of data that is often difficult to readily search for patterns and trends using conventional log file analysis techniques. The data from the honeypots has been statically extracted and processed through Afterglow scripts to produce inputs suitable for use by the DOT graph based tools contained within Graphviz. This paper explores some of the benefits and drawbacks of currently using this type of approach.