From Risk Awareness to Security Controls: Bene ts of Honeypots to Companies

Abstract

Many companies are deploying their business on the Internet using web applications while the question of what is the risk to business operations of cyber-attacks remains unanswered. Risk awareness allows to identify and act upon the security risk of these applications. This paper analyzes di erent security frameworks commonly used by companies in order to evaluate the bene ts of honeypots in responding to each framework's requirements and, consequently, mitigating the risk.