# Honeyfile Camouflage: Hiding Fake Files in Plain Sight

arXiv: https://arxiv.org/abs/2405.04758 · HTML: https://mlsanity.com/paper/2405.04758/

## Key facts

- No citing papers in the map yet (data through 14 Oct 2026).
- Builds on 1 of its 26 references that are in the map.
- First posted on arXiv 8 May 2024.

## Builds on (most cited first, 1 of 1)

- [Enriching Word Vectors with Subword Information](https://mlsanity.com/paper/1607.04606/) (2016)

## Abstract (arXiv)

Honeyfiles are a particularly useful type of honeypot: fake files deployed to detect and infer information from malicious behaviour. This paper considers the challenge of naming honeyfiles so they are camouflaged when placed amongst real files in a file system. Based on cosine distances in semantic vector spaces, we develop two metrics for filename camouflage: one based on simple averaging and one on clustering with mixture fitting. We evaluate and compare the metrics, showing that both perform well on a publicly available GitHub software repository dataset.