Presentation on Client-Side Honeypots
Bing Yuan just finished his thesis on Client-side Honeypots. While the tool itself is still not completely finished, his final presentation is available.
The basic idea of this thesis is to combine a component that drives Internet Explorer or other client-side applications (Word, PowerPoint, Winamp, Photoshop, ...) with CWSandbox. CWSandbox monitors the application in real-time and detects suspicious activities like creation of files, new processes, new registry keys, or similar activities. That way, information about client-side exploits can be captured - something that is not possible with regular, server-based honeypots.
The basic idea of this thesis is to combine a component that drives Internet Explorer or other client-side applications (Word, PowerPoint, Winamp, Photoshop, ...) with CWSandbox. CWSandbox monitors the application in real-time and detects suspicious activities like creation of files, new processes, new registry keys, or similar activities. That way, information about client-side exploits can be captured - something that is not possible with regular, server-based honeypots.
".
Top 10 Configuration Security Vulnerabilities : Part One10 Hot Security StartupsHD DVD Blu-Ray Decryption Key Widely Posted OnlineEndpoint scan - scan the network for USB devices Analysis: Enterprise Key Management Presentation on Client-Side HoneypotsOpe
Tracked: May 07, 00:59