Investigating Characteristics of Attacks on Public Cloud Systems

Abstract

In this work, honeypots were set up on several public cloud infrastructures of Amazon, Microsoft and Google located in different regions around the world, including North America, Asia and Europe. The honeypots, simulating different popular services like SSH and VNC, were used to collect data over a period of two month, resulting in over 170 million log entries. Further analysis of the log entries regarding attack patterns and geographic characteristics are presented in this paper. For example, the attacks originated from 216 countries involving 268,614 unique IPs, dominated by China with a share of 25.83%.

Mehr zum Titel

Titel	Investigating Characteristics of Attacks on Public Cloud Systems
Medien	2019 6th IEEE International Conference on Cyber Security and Cloud Computing (CSCloud)/ 2019 5th IEEE International Conference on Edge Computing and Scalable Cloud (EdgeCom)
Verlag	IEEE
ISBN	978-1-7281-1662-4
Verfasser	Davide Bove, Prof. Dr. Tilo Müller
Veröffentlichungsdatum	03.10.2019
Zitation	Bove, Davide; Müller, Tilo (2019): Investigating Characteristics of Attacks on Public Cloud Systems. 2019 6th IEEE International Conference on Cyber Security and Cloud Computing (CSCloud)/ 2019 5th IEEE International Conference on Edge Computing and Scalable Cloud (EdgeCom).