Plataforma para Análise de Dados de Honeypots no Curto Prazo
Gustavo José Neves da Silva, Rafael Rodrigues Obelheiro · Anais do XI Computer on the Beach - COTB '20 · 2020
Honeypots are computing resources whose value lies in being probed,attacked, or compromised. They are security tools instrumentalin observing attackers’ behavior and understanding attack dynamics.Honeypots generate a large amount of monitoring data, whichare often processed and analyzed manually. This introduces a delayin the perception of atypical occurrences and changes in trends,often rendering a deeper analysis of such phenomena unfeasible.We introduce a platform for the periodic automated processing ofdata collected by honeypots. The platform generates statistics andgraphs from a set of traffic capture files in the PCAP format, andits modular design allows it to be easily extended and adapted toproduce different outputs.