Third generation (GenIII) honeynets [30 mn of reading - published 4/23/2006 8:13:10 PM - Target : Confirmé]

Author

François ROPERT Student-Engineer Supinfo Paris SUPINFO graduate year  2008    Write to the person    All projects of the same author    Mini-CV of the author

Resume

This project explains theory and practical about a honeynet solution based on the new GenIII architecture.

Honeynets are more and more deployed in the professional world.

According to a survey realized by Andrew Lab of the “The distributed Honeypot Project” project in March 2006, 58% of people declared to have a honeynet or a honeypot in their enterprise.

Honeynets evolute rapidly and their plus-value is justified day after day.

Sommaire

• Introduction
• 1 GenIII architecture
• 1.1 Data capture
• 1.2 Data fusion
• 2 GenIII GNU/Linux distributions based
• 2.1 ROO Honeywall CDROM
• 2.2 Honeystick
• 3 Deploy ROO Honeywall CDROM
• 3.1 Installation
• 3.2 Operating System configuration
• 3.3 Management interface configuration
• 3.4 Honeywall configuration
• 4 Exploit ROO
• 4.1 WallEye web interface
• 5 Some interesting statistics about honeynets
• 5.1 Andrew Lamb survey
• Conclusion