Demo: SweetsPot: A Distributed Honeypot Federation Platform
Tillmann Angeli, Frédéric Beck, Daishi Kondo, Isabelle Chrisment, Hideki Tode, Hans Dieter Schotten · 2025
Networks of honeypots, similar to network telescopes, enable the monitoring of Internet threat activity. Honeypots can collect service-specific information about threat behavior and capabilities, depending on their configuration. This demonstration paper presents SweetsPot, a distributed honeypot data collection system. SweetsPot aims to facilitate threat research to model attacker behavior and characterize emerging threats. Additionally, SweetsPot supports live-streaming of event data, enabling rapid analysis, visualization, and timely threat response.