Honeypots: Not Just for Pooh

Slides:

Advertisements

Similar presentations

Honeynet Introduction Tang Chin Hooi APAN Secretariat.

Advertisements

Uzair Masood MASYU001.  What is a honey Pot ? “ A honey pot is an information system resource whose value lies in unauthorized or illicit use.

HONEYPOTS Mathew Benwell, Sunee Holland, Grant Pannell.

Guide to Computer Forensics and Investigations1 Network Forensics Overview Network forensics –Systematic tracking of incoming and outgoing traffic To ascertain.

Honeypot 서울과학기술대학교 Jeilyn Molina Honeypot is the software or set of computers that are intended to attract attackers, pretending to be weak.

Hackers, Crackers, and Network Intruders: Heroes, villains, or delinquents? Tim McLaren Thursday, September 28, 2000 McMaster University.

Honey Pots: Natures Dessert or Cyber Defense Tool? Eric Richardson.

McGraw-Hill/Irwin Copyright © 2013 by The McGraw-Hill Companies, Inc. All rights reserved. Extended Learning Module H Computer Crime and Digital Forensics.

INDEX  Ethical Hacking Terminology.  What is Ethical hacking?  Who are Ethical hacker?  How many types of hackers?  White Hats (Ethical hackers)

Honeynet/Honeypot Project - Leslie Cherian - Todd Deshane - Patty Jablonski - Creighton Long May 2, 2006.

Intrusion Prevention System DYNAMIC HONEYNET by Rosenfeld Asaf advisor Uritzky Max.

Vijay krishnan Avinesh Dupat  Collection of tools (programs) that enable administrator-level access to a computer or computer network.  The main purpose.

Detecting Botnets Using Hidden Markov Models on Network Traces Wade Gobel Bio-Grid, Summer 2008.

Honeypot An instrument for attracting and detecting attackers Adapted from R. Baumann.

Honeypots By Merkur Maclang and John Luzzi CMPT 495.

Security Awareness Challenges of Security No single simple solution to protecting computers and securing information Different types of attacks Difficulties.

Introduction to Honeypot, Botnet, and Security Measurement

Intrusion Detection Chapter 12.

Kirby Kuehl Honeynet Project Member 05/08/2002 Intrusion Deception.

HONEYPOT.  Introduction to Honeypot  Honeytoken  Types of Honeypots  Honeypot Implementation  Advantages and Disadvantages  Role of Honeypot in.

HoneyD (Part 2) Small Business NIDS This presentation demonstrates the ability for Small Businesses to emulate virtual operating systems and conduct.

Honeypots. Introduction A honeypot is a trap set to detect, deflect, or in some manner counteract attempts at unauthorized use of information systems.

Honeypot and Intrusion Detection System

SATAN Presented By Rick Rossano 4/10/00. OUTLINE What is SATAN? Why build it? How it works Capabilities Why use it? Dangers of SATAN Legalities Future.

Honeypots and Honeynets A New Response to Cybercrime Analysis NAAG Seattle 04/14/03.

Honeypots “The more you know about the enemy, the better you can protect about yourself” Rohan Rajeevan Srikanth Vanama Rakesh Akkera.

Advanced Attack Detection and Infrastructure Protection Sean Ensz –OU IT Security Analyst Sallie Wright –OSU IT Security Officer Dr. Mark Weiser –OSU Director.

Honeynets Detecting Insider Threats Kirby Kuehl

KFSensor Vs Honeyd Honeypot System Sunil Gurung

Kali Linx Attacks Jim Nasto. Window 8 Computer On my Windows 8 64 bit OS machine. I started using a Virtual Machine using Hyper V Manager and shared the.

1Of 25. 2Of 25  Definition  Advantages & Disadvantages  Types  Level of interaction  Honeyd project: A Virtual honeypot framework  Honeynet project:

© 2001 by Carnegie Mellon University SS5 -1 OCTAVE SM Process 5 Background on Vulnerability Evaluations Software Engineering Institute Carnegie Mellon.

HONEYPOTS PRESENTATION TEAM: TEAM: Ankur Sharma Ashish Agrawal Elly Bornstein Santak Bhadra Srinivas Natarajan.

CONDUCTING CYBERSECURITY RESEARCH LEGALLY AND ETHICALLY By Aaron J. Burstein; Presented by David Muchene.

A VIRTUAL HONEYPOT FRAMEWORK Author : Niels Provos Publication: Usenix Security Symposium Presenter: Hiral Chhaya for CAP6103.

1 Honeypot, Botnet, Security Measurement, Spam Cliff C. Zou CDA /01/07.

A Virtual Honeypot Framework Niels Provos Google, Inc. The 13th USENIX Security Symposium, August 9–13, 2004 San Diego, CA Presented by: Sean Mondesire.

Introduction to Honeypot, measurement, and vulnerability exploits

Honeypots and Honeynets Alex Dietz. To discover methods used to breach a system To discover new root kits To learn what changes are made to a system and.

What is risk online operation:  massive movement of operation to the internet has attracted hackers who try to interrupt such operation daily.  To unauthorized.

Evaluate the Merits of Using Honeypots to Defend against Distributed Denial- of-Service Attacks on Web Servers By Cheow Lip Goh.

{ Cloud computing. Exciting and relatively new technologies allow computing to be a part of our everyday lives. Cloud computing allows users to save their.

1 Introduction and Definitions. 2 Purpose of the Course This course is designed to provide students with hands on experience on identifying places where.

McLean HIGHER COMPUTER NETWORKING Lesson 13 Denial of Service Attacks Description of the denial of service attack: effect: disruption or denial of.

Intrusion Detection on a Shoestring Budget Shane Williams UT Austin Graduate School of Library and Information Science Oct. 18, 2000 SANS Network Security.

INTRODUCTION TO COMPUTER & NETWORK SECURITY INSTRUCTOR: DANIA ALOMAR.

Speaker: Hom-Jay Hom Date:2009/10/20 Botnet Research Survey Zhaosheng Zhu. et al July 28-August

Forensic Computing: Tools, Techniques and Investigations Assignment 1 Seminar.

Systems Analysis and Design in a Changing World, 6th Edition 1 Chapter 6 - Essentials of Design an the Design Activities.

COSC513 Final Project Firewall in Internet Security Student Name: Jinqi Zhang Student ID: Instructor Name: Dr.Anvari.

UNDER THE GUIDENCE OF: Mr.M.JAYANTHI RAO,M.Tech HOD OF IT. BY: I.ADITHYA(09511A1212) HONEYPOTS.

Brooke Thorpe COSC 101-Section 7. Overview What is a Firewall? System designed to prevent unauthorized access to or from a private network Will check.

SECURITY ANALYSIS TOOLS FOR INFORMATION MANAGEMENT Alicia Coon.

General Information: This document was created for use in the "Bridges to Computing" project of Brooklyn College. You are invited and encouraged to use.

Using Honeypots to Improve Network Security Dr. Saleh Ibrahim Almotairi Research and Development Centre National Information Centre - Ministry of Interior.

Web Application Security

Linux Security Presenter: Dolev Farhi |

Tor Good + Evil.

Employee clicks on fake

Secure Software Confidentiality Integrity Data Security Authentication

Tangled Web: Using Deception in Defense

Answer the questions to reveal the blocks and guess the picture.

Ethical hacking

Social Engineering No class today! Dr. X.

Internet Worm propagation

12/6/2018 Honeypot ICT Infrastructure Sashan

Friday, December 07, 2018 Honeypot ICT Infrastructure Sashan Kantonsspital Graubunden ICT Department.

Unit 36: Internet Server Management

Security Overview: Honeypots

Chapter 1 Key Security Terms.

Presentation transcript:

Honeypots: Not Just for Pooh By: Miranda Alicia Bryant COSC5010 – Jim Ward Spring 2006

“All Warfare is based on Deception.” A Thought… “All Warfare is based on Deception.” Sun Tzu

Honeypots Defined: A honeypot is defined as “A resource whose value is being attacked or compromised. This means, that a honeypot is expected to get probed, attacked, and potentially exploited.” (Spitzer)

Categories of Honeypots Low Interaction Simple, basic services only Medium Interaction More services, database or server High Interaction Complicated, entire OS available

Why use them? Research Tool Hide Main Machines in a web of “fake” ones Part of the Security Software

Hidden Dangers Zombie Machines More Fodder for Black Hats Major Danger with High Interaction More Fodder for Black Hats Learn as much as Security Pro’s from reports Ethical Dangers for users How much information is collected?

Legal Issues Wiretap Act Pen/Trap Statute Loopholes Governs phone lines Pen/Trap Statute Realm of collection of information that pertains to the world outside the phone lines

The Honeynet Project www.honeynet.org Information collected “To learn the tools, tactics and motives involved in computer network attacks, and share the lessons learned.” Three goals: Awareness, Information, and Tools.

Examples of Honeypot Software Low Interaction: LaBrea Tarpit Bubblegum Medium Interaction: Mwcollect Honeybot High Interaction: Sombria Bait n Switch

References Honeynet: www.honeynet.org LaBrea Tarpit: http://labrea.sourceforge.net/ BubbleGum: http://www.proxypot.org/ Honeybot: http://www.atomicsoftwaresolutions.com/honeybot.php

References (cont) MWCollect: http://www.mwcollect.org/ Sombria: http://www.lac.co.jp/business/sns/intelligence/sombria_e.html BaitnSwitch: http://baitnswitch.sourceforge.net/