Hack In The Box 2006 Honeypot Summary
I'm now back from Hack In The Box 2006, the largest security conference in Asia. It was a really nice conference and if you have some time next year, you should go there and enjoy the conference!
From a honeypot point of view, there were three interesting presentations:
All slides are now available at the material site.
From a honeypot point of view, there were three interesting presentations:
- Michael Davis - "Client Honeypots - Its not only the network": he did a presentation about client-side honeypots, i.e., honeypots that are able to learn more about attacks against client applications like web browsers or e-mail clients. This kind of honeypots typically searches for malicious content, e.g., by crawling the web. The presentation contains links to the four most prevalent client-side honeypot solution available for now.
- Nguyen Anh Quynh - "Towards an Invisible Honeypot Monitoring Tool": the presentation by Nguyen was about Xebek, a monitoring solution for honeypots based on Xen. It overcomes most of the weaknesses by Sebek, and he plans to publish it in the near future (hopefully).
- Thorsten Holz - "Playing with Botnets for Fun and Profit": my presentation dealt with nepenthes, CWSandbox, and some economic aspects of botnets.
All slides are now available at the material site.
".
