Demo: SweetsPot: A Distributed Honeypot Federation Platform
Networks of honeypots, similar to network telescopes, enable the monitoring of Internet threat activity. Honeypots can collect service-specific information about threat behavior and capabilities, depending on their configuration. This demonstration paper presents SweetsPot, a distributed honeypot data collection system. SweetsPot aims to facilitate threat research to model attacker behavior and characterize emerging threats. Additionally, SweetsPot supports live-streaming of event data, enabling rapid analysis, visualization, and timely threat response.
Authors
- Hans D. Schotten (ORCID: https://orcid.org/0000-0001-5005-3635)
- Daishi Kondo (ORCID: https://orcid.org/0000-0003-1482-6148)
- Hideki Tode (ORCID: https://orcid.org/0000-0001-9443-7446)
- Frédéric Beck
- Tillmann Angeli (ORCID: https://orcid.org/0009-0005-0618-1839)
- Isabelle Chrisment
Institutions
- Centre National de la Recherche Scientifique (FR)
- German Research Centre for Artificial Intelligence (DE)
- Laboratoire Lorrain de Recherche en Informatique et ses Applications (FR)
- Osaka Metropolitan University (JP)
- Tokyo Metropolitan University (JP)
- The University of Tokyo (JP)
- Université de Lorraine (FR)
Publication Details
- Published
- 2025-09-15
- DOI
- https://doi.org/10.1109/lcn65610.2025.11146336
- Primary Topic
- Peer-to-Peer Network Technologies
- Type
- article
- Field-Weighted Citation Impact
- 0.00