The widespread adoption of cloud infrastructure exposes organisations to new threats and present new opportunities for attackers. Deploying honeypots in the cloud allows the collection and analysis of attack data showing how attackers are seeking to compromise servers in this environment. Understanding and reacting to the different strategies used by attackers allows security teams to optimise defenses against threats in realtime. In this presentation we will discuss how honeypots can be deployed in the cloud, and present detailed analysis of attacks against Alert Logic’s cloud honeypot system. amsterdamtc-20150505-martin_lee-cloud_honeypots.pdf