UK Honeynet Project 

Although it has been a long while coming, the Honeynet Project have finally released version 1.2 of the Roo Honeywall. This release moves the base platform to the actively maintained Fedora Core 6 OS release and adds a number of other updates, enhancements and bug fixes. Of particular interest to people running honeynets in the wild will be the default enabling of BPF filters that ensure only traffic explicitly addressed to monitored honeypots is logged.

For the last six months, David Watson has has been leading the Honeynet Project’s Global Distributed Honeynet (GDH) initiative. Phase One of the GDH initiative concluded 31/05/07, with a three month status report being delivered to members of the honeynet research community 01/07/07. We are now looking at how we release more of our findings to the public, and also how best to continue our research in future GDH phases.

The Honeynet Project has begun the process of opening its development mailing lists and svn repository up to the public, with a development wiki to follow soon too. The first project to go public is Honeysnap, led by members of the UK Honeynet Project, so please sign up if you are interested and actively using Honeysnap.

The UK Honeynet Project status report has been released for the period March 2006 – April 2007.

Honeynet Project workshop for US Navy Strategic Studies Group in Rhode Island.

Honeynet technology and malware collection presentation in York for the UK Serious Organised Crime Agency (David Watson).

Second lightning talk on Global Distributed Honeynets (GDH) at CanSecWest07 in Vancouver (David Watson).

Honeynet Project botnet and novel malware workshop in Virginia (David Watson).