Assignment 3: Questions, challenges, and programs demonstrating the following Honeyd Build it Create a script/program to simulate one Integrate it with honeyd Create a configuration Include a router personality Include multiple host personalities running various OSes Run it Hint: You can run it on the loopback interface Use Nmap to scan the simulated network Collect a network trace of the data received by the honeypot Metasploit Download and run Launch an attack against one of the simulated services Compare the logs generated by the service and the network dump Can you run honeyd on your real network interface? Listen on some unused ports (e.g., sshd, ftpd, SMTP, if you are not using them) Advertise your “honey”-service on the Internet Capture data hitting your service, anything interesting? Where did the connections come from? What usernames/passwords did the attacker try? Other honeypots Nepenethes, http://nepenthes.carnivore.it/download Mwcollect, http://directory.fsf.org/wiki/Mwcollect Other data collection tools Sebek, https://projects.honeynet.org/sebek/