19–20 Sept 2024
University POLITEHNICA of Bucharest
Europe/Bucharest timezone

Cowrie SSH Honeypot: Architecture, Improvements and Data Visualization

20 Sept 2024, 12:10
20m
EC102

EC102

Paper presentation Network Security Network Security

Speaker

Mr Vlad-Iulius Năstase (University POLITEHNICA of Bucharest)

Description

As the competition between threat actors and defenders in the security landscape continues, honeypot deployments become more common as a source of threat intelligence. Yet, documentation for these systems is usually scarce, and their development halts or slows down in time. A better understanding of such systems can lead to deployments of higher deceitfulness, yielding higher quality threat intelligence. This paper aims to improve knowledge about the SSH honeypot Cowrie, presenting both knowledge that aids in understanding its architecture and improvements added to its source code to better suit our deployment or fix encountered issues.

Author

Mr Vlad-Iulius Năstase (University POLITEHNICA of Bucharest)

Co-authors

Dr Maria-Elena Mihăilescu (University POLITEHNICA of Bucharest) Mr Darius Mihai (University POLITEHNICA of Bucharest) Dr Sergiu Weisz (University POLITEHNICA of Bucharest) Lukas Vytautas Dagilis (NRD Cyber Security) Prof. Mihai Carabaș (University POLITEHNICA of Bucharest)

Presentation materials

There are no materials yet.