As cyber adversaries increase the sophistication and persistence of their attacks, old methods treating all threats the same become increasingly inadequate. One method for gaining better context around these threats is the use of “honeypots.” A honeypot is a security resource deliberately designed to be probed, attacked and compromised, for the purpose of gathering intelligence around an attacker. By tricking our adversaries into believing that they have gained access to our systems, we can watch their activities, where they connect from, what malware they upload to systems and other crucial information. Furthermore, when integrated with other threat intelligence and automation tools, we can leverage this data to not only provide context around the threat but also to initiate an immediate response to block the attacker and share the data across our organizations or with others. In this webcast, security engineer Ioannis Koniaris, developer of Honeydrive, a popular Linux distribution that comes with several honeypot applications pre-installed, discuss with us how various open source honeypot tools work and how they can be used to gather threat intelligence data. Tripwire security researcher Ken Westin will present how to make use of the honeypot data collected to provide richer analytics and enhance your defenses.

4. Know Yourself: Vulnerability Centered
•
•
•
•
•

5. Know Your Enemies: Threat Centered
•
•
•
•
•
•

7. Space I can recover.
Time, never.
— Napoleon Bonaparte

8. Hacking is a Business Too: Reduce Their ROI

9. Ioannis Koniaris, GCIH, GSNA, eCPPT, eMAPT

10. ●
●
● http://bruteforce.gr
●
●

11. ●
●
●

12. ●
●
●
●

13. ●
●
●

14. ●
●
●
●

15. ●
o
o
●
o
o

16. ●
●
●

17. ●
o
o
o
●
●

18. ●
●
●
●

19. ●
●
●
●
●

20. ●
o
o
o
●

21. ●
●
●

22. ●
●
●

23. ●
●
●

24. ●
●
●

25. ●
●
●
●

26. ●
o
●
o

27. ●
o
o
●

28. ●
●
●
●

29. ●
●
●
●
●
●

30. ●
●
●

31. ●
o
o

32. ●
o

33. ●
o

34. ●
o

35. ●
o
o

36. ●
http://map.honeynet.org

38. ●
http://bruteforce.gr/honeydrive
●
●
●

39. ●
https://github.com/desaster/kippo
●
●
●
●
●
●

40. ●
http://bruteforce.gr/kippo-graph

41. ●
https://github.com/ikoniaris/kippo

42. ●
http://dionaea.carnivore.it/
●
●
●
●
●

43. ●
http://rubenespadas.github.io/DionaeaFR/

44. ●
http://glastopf.org/
●
http://brindi.si/g/projects/wordpot.html

45. ●
http://conpot.org/
●
●

46. ●
http://www.honeyd.org/
●
●
http://bruteforce.gr/honeyd2mysql
●
http://bruteforce.gr/honeyd-viz

47. ●
http://sourceforge.net/projects/adhd/
●
●
●
●

48. ●
https://github.com/honeynet/beeswarm
●
●

50. ●
http://threatstream.github.io/mhn/
●
https://github.com/mlsecproject/combine
●
http://deadbits.org/projects/arcreactor/

51. ●
●
●
●
●

52. ● http://bruteforce.gr
● ikoniaris@gmail.com
●