Honeynet Research Alliance “Becoming Involved” Richard Gene La Bella George Chamales

Speakers  Richard Gene La Bella Florida Honeynet Project  George Chamales University of Texas at Austin Honeynet Project

“Getting Involved” The Honeynet Research Alliance

Purpose  What is the Honeynet Research Alliance?  Current Members  Benefits of Alliance Membership  Getting Involved  Panel Discussion

The Honeynet Research Alliance  Sponsored by the Honeynet Project  Designed for organizations actively involved in Honeynet research/deployment  A forum to:  Exchange ideas  Share experiences  Collaborate on projects

An International Organization

HNRA Members (in no particular order)  Florida Honeynet Project  University of Texas at Austin Honeynet Project  AT&T Mexico Honeynet  Netforensics Honeynet (New Jersey)  Azusa Pacific University Honeynet (California)  Brazilian Honeynet Project  Irish Honeynet Project  Paladion Honeynet Project (India)  Norwegian Honeynet Project  UK Honeynet Project  West Point Honeynet Project (USMA New York)

Benefits of Alliance Membership  Participate in the development of the latest and greatest in Honeynet technology  Share and correlate information from around the world  Collaborate on projects  Conferences  Annual Group Gathering at Lance’s place

The Latest and Greatest Technology  Members have advanced access to all Honeynet Project tools and direct contact with the developers  Alliance members have actively participated in the testing and development of:  Honeywall CDROM  Sebek2  Honeynet UI  Enterprise Security Console  Snort-Inline  KYE the Book  Various Whitepapers

World-Wide Information Gathering The HNRA has deployed a centralized database to collect data from Honeynets deployed by members of the Alliance  Data is uploaded and stored in standardized format  Centralized data analysis and correlation of different data types  Designed for attack trend & statistical analysis

Sharing and Learning Alliance Mailing List  Encrypted, unmoderated list used by members  Continual updates on projects, status, events SILC channel  Centralized, secure Internet Relay Chat (IRC)  Real-time communication between members  An awesome community environment

Requirements for Membership  Actively deploying honeynet technologies  Abide by the Standards and Requirements for honeynet deployment  Maintain a website which reflects your honeynet organization  Generate quarterly reports  Play an active role in the Alliance

Panel Discussion Honeynet Research Alliance