Security

For Stronger Password Security, Try a Spoonful of Honeywords For Stronger Password Security, Try a Spoonful of Honeywords- Describing new scheme of password protection called honeywords. Sweet Password Security Strategy: Honeywords - Security - Intrusion Sweet Password Security Strategy: Honeywords - Security - Intrusion- To improve detection of database breaches, businesses should store multiple fake passwords and monitor attempt… Honeywords: Making Password-Cracking Detectable Honeywords: Making Password-Cracking Detectable- Research paper suggesting a simple method for improving the security of hashed passwords: the maintenance of additional \honeyword… Thug low-interaction honeyclient Thug low-interaction honeyclient- A Python low-interaction honeyclient aimed at mimicing the behavior of a web browser in order to detect and emulate malicious contents HoneyDrive Desktop HoneyDrive Desktop- A virtual appliance containing various honeypot software packages. Deploying and Using Sinkholes Deploying and Using Sinkholes- Sink Holes - an ISP Security Tool Sysenter Honeynet Project Sysenter Honeynet Project- A volunteer no-profit research organization. Aim is to provide information about emerging security threats and vulnerabilities active in the wild in ord… Honeyd Control Center Honeyd Control Center- Honeyd configuration wizard, a SQL Interface, and reports. Glastopf Honeypot Project Page Glastopf Honeypot Project Page- Glastopf is a small Python webserver which emulates thousands of web application vulnerabilities. HoneySink: Beta Release | The Honeynet Project HoneySink: Beta Release | The Honeynet Project- HoneySink is an open source network sinkhole that provides a mechanism for detection and prevention of malicious traffic on a given… Medium Interaction Honeypots Medium Interaction Honeypots- Document outlines the weaknesses of different existing approaches to catch malware – especially bots – and shows how Medium Interaction Honeypots sol… Wikipedia: Client Honeypot Wikipedia: Client Honeypot- Encyclopedia article about the security devices, including several examples. Honeypot + Honeypot = Honeynet Honeypot + Honeypot = Honeynet- Article discussing the creation of the Honeynet Project. Honeypot (computing) - Wikipedia Honeypot (computing) - Wikipedia- Brief encyclopedia article describing Honeypots. Honeywall CDROM Honeywall CDROM- A honeynet gateway on a bootable CDROM. Know Your Enemy Know Your Enemy- A series of white papers describing the concepts and technology of the Honeynet Project and Research Alliance and sharing lessons learned. Google Hack Honeypot (GHH) Google Hack Honeypot (GHH)- Emulates a vulnerable web application by allowing itself to be indexed by search engines. Project information and free download. Honeycomb Honeycomb- A system for automated generation of signatures for network intrusion detection systems (NIDSs). MicroSolved, Inc. MicroSolved, Inc.- Seller of HoneyPoint family of products. NoAH NoAH- European Network of Affiliated Honeypots. Capture Capture- A high interaction client honeypot. A client honeypot is a security technology that allows one to find malicious servers on a network. Honeywall Honeywall- The Honeywall CDROM is a bootable CD that installs onto a hard drive and comes with all the tools and functionality for you to implement data capture, control and analy… HoneyC Low-Interaction Client Honeypot HoneyC Low-Interaction Client Honeypot- A platform independent low interaction client honeypot that allows identify rogue servers on the web. Honeynet.org: Tracking Botnets Honeynet.org: Tracking Botnets- Paper on the use of honeynets to learn more about botnets. Covers uses of botnets, how they work and how to track them. Open Proxy Honeypot Open Proxy Honeypot- Web Application Security Consortium Distributed Open Proxy Honeypot Project. The Bait and Switch Honeypot System The Bait and Switch Honeypot System- A system that redirects all hostile traffic from your production systems to a honeypot that is a partial mirror of your production system. Onc… Anton Chuvakin Honeynet Anton Chuvakin Honeynet- Live honeynet status data, papers produced as a result of research, and other related resources. The Strider HoneyMonkey Project The Strider HoneyMonkey Project- Microsoft Research project to detect and analyze Web sites hosting malicious code using client-side honeypots. KeyFocus - KF Sensor - Honey pot IDS KeyFocus - KF Sensor - Honey pot IDS- A Windows honeypot designed to attract and detect hackers by simulating vulnerable system services and trojans. Honeybee Honeybee- A tool for semi-automatically creating emulators of network server applications. Know your Enemy: Phishing Know your Enemy: Phishing- This white paper aims to provide practical information on the practice of phishing and draws on data collected by the German Honeynet Project and UK Hon… Spampoison Spampoison- Website set up to deliver almost infinite numbers of bogus email addresses to email harvesting bots. spank spank- A collection of programs to deploy, run and analyse network and host simulations in IP networks. WebMaven (Buggy Bank) WebMaven (Buggy Bank)- WebMaven is an intentionally broken web application. It is intended to be used in a safe legal environment (your own host) as a training tool, as a basic be… Impost Impost- Impost can either act as a honey pot and take orders from a Perl script controlling how it responds and communicates with connecting clients; or it can operate as a packet… Basted Basted- A program that acts as a honeypot for spammers who use spambots to harvest email addresses from Web sites. Know Your Enemy: GenII Honeynets Know Your Enemy: GenII Honeynets- An Introduction to second generation honeynets (honeywalls). SCADA HoneyNet Project SCADA HoneyNet Project- SCADA HoneyNet Project: Building Honeypots for Industrial Networks (SCADA, DCS, and PLC architectures). LaBrea Tarpit LaBrea Tarpit- A program that creates a tarpit or, as some have called it, a "sticky honeypot". Honeypots: Monitoring and Forensics Project Honeypots: Monitoring and Forensics Project- Techniques, tools and resources for conducting Honeypot Research and Forensic Investigation. White papers include monitoring VMware ho… An Evening with Berferd An Evening with Berferd- A hacker is lured, endured, and studied. One of the first examples of a honeypot. First published in 1992. Deception ToolKit (DTK) Deception ToolKit (DTK)- A toolkit designed to make it appear to attackers as if the system running DTK has a large number of widely known vulnerabilities. SourceForge.net: Project - HoneyView SourceForge.net: Project - HoneyView- A tool to analyze honeyd-logfiles of the honeyd-daemon. Generates graphical and textual results from queries against the logfile data. Honeypots Honeypots- Information covering intrusion detection and prevention systems, research and production honeypots, and incident handling. Also provides general overview of network sec… Honeyd Honeyd- Small daemon that creates virtual hosts on a network (honeypot). Can be used as a virtual honeynet, for network monitoring, or as a spam trap. For *BSD, GNU/Linux, and Sol… COAST Internet Firewalls Hotlist COAST Internet Firewalls Hotlist- A list of firewall vendors, white papers, resources, and FAQs. DShield DShield- Distributed Intrusion Detection System collects firewall log excerpts from volunteers. The logs are aggregated and analyzed. Several reports are generated showing trends … Tek-Tips Tek-Tips- General computer security technical support forums. Selling and recruiting forbidden. Technical Info Technical Info- Provides plain language technical papers on security and securing organizations. The Encyclopedia of Computer Security The Encyclopedia of Computer Security- A complete one-source location for information security news, products, whitepapers, events, and definitions requires the use of JavaScript …