| Description: |
This talk will describe the Honeynet Project, its recent and notable security findings, and a review of several Project tools for the capture and analysis of malicious data.The Honeynet Project's goal is to improve the security of the Internet by sharing lessons learned about information security threats. The Project deploys honeynets all around the world, captures attacks in the wild, analyzes this information and shares its findings. Based on this information, the security community can better understand the threats they face and how to defend against them.
The Honeynet Project is an international, non-profit (501c3) research organization dedicated to improving the security of the Internet at no cost to the public. The Project's goal, simply put, is to make a difference. The project accomplish this goal through awareness outreach, detailed vulnerability and data analysis, and tool development. Of recent note was the Honeynet Projects predominate role in the Conficker Cabal in 2009.
The Honeynet Project has many outreach efforts. Of note is the "know your enemy" paper series and the scan of the month challenge. Many security organizations (SANS, Security Focus, etc) provide technical vulnerability notification for new threats; the Project compliments this analysis with critical additional information, such as attacker motives in attacking, how they communicate, and their actions after compromising a system. Best of all, these attacks are "from the wild", real hacks on deployed honeynets.
The Honeynet Project continuously develops new tools, ranging from data capture to data analysis to attacker profiling. The tool development efforts are driven by membership interests and community needs.
BIO : Lieutenant Colonel Ronald C. Dodge JR, holds a Ph.D. He is Academy Professor, Associate Dean, Information & Education Technology, United States Military Academy, West Point, NY.He has held this position, together with Associate Professor, Department of Elecrical Engineering and Computer Science at the Academy since 2007.
In his current role he is responsible for the daily management of information technology (IT) operations and developing strategic plans, allocating budgetary and IT resources, and developing IT policies for the Dean, the Dean's staff, 13 academic departments and 23 research centres at the Academy.
|