TC December 2009

Hands on with the Honeywall and virtual honeypots

Hands-on Session 5 presented by David Watson, Honeynet

Wednesday — December 2nd, 2009 14:00

Wednesday — December 2nd, 2009 16:00

A chance to spend some hands on time learning about honeynet technologies in a safe, controlled manner. A brief background to the evolution of honeypots followed by an introduction to the Honeywall, which is one of the primary tools used for honeynet data control and data capture. Extracting high interaction I/O activity using Sebek, analysis of attacks against low and high interaction honeypots, using honeypots for automated malware collection and analysis, and an introduction to client honeypots. Hopefully both informative and fun, aiming to show you how honeypots can be used in the real world to improve information security.

Presenters

  • David Watson (Honeynet, GB) GB

    David Watson is the Chief Research Officer for the Honeynet Project, a non-profit security organization dedicated to sharing its research and findings on cyber threats. As an active security researcher he regularly presents at international conferences or workshops and has contributed to various publications in the field of IT security.

    David has been involved with deploying honeypots since 1999 and is currently the project manager and lead developer for the Honeynet Project's Global Distributed Honeynet (GDH) initiative, which focused on analysing data gathered from networks of internationally distributed honeypots. He also leads the UK Honeynet Project Chapter and co-owns growing UK open source software development company Isotoma.