APNIC Senior Security Specialist Adli Wahid presented on Honeypots and DASH at the FIRST 1st Regional Virtual Lightning Talk Session, held for the first time online on 25 February 2020.

1. Honeypots and DASH
Adli Wahid
APNIC
adli@apnic.net | @adliwahid
FIRST.org Lighting Talk in a Box

2. Overview
• Ongoing work
• Security Engagement with APNIC Members / Network
Operators in the APAC Region
• Not about /bin/dash

3. APNIC Community Honeynet Project
• Honeypots are so 80s J
• Educational value
o Trainings – Workshop, Webinars & Tutorials @ APRICOT, APNIC Conferences and
elsewhere
o Explore other training opportunities and provide context to discussion on IR,
detection, Analysis, Threat Intel and so forth
o Overall good exposure, assess the sentiment of the community
• Post Workshop
o Interested to deploy and learn
o Continuous / targeted engagements (that is with CERTs/CSIRTs)
• In 2017 – ‘officialized’ the project
o Resources to setup and maintain backend
o Partners in AP Economies
o Credits https://github.com/CommunityHoneyNetwork/CHN-Server
o Work in Progress https://feeds.honeynet.asia

4. DASH
• Internally developed portal for APNIC Members
o Provide security related information - ”Your
Autonomous System Health”
o https://dash.apnic.net/
o Version 1 launched last year
• Getting data collected from the honeynet to
APNIC Members
o Data (Report) from your ASN / Prefixes hitting the
honeypots
o Opportunity to outreach engage directly with
network/security engineers/abuse-team
o Provide more awareness & assist with remediation
once trust is established
• Exploring other features*

5. Thank You
Adli Wahid
adli@apnic.net @adliwahid
Join us @ virtual APRICOT 2021
Conference next week
https://2021.apricot.net/