Watching the Bad Guys with Cowrie
This Is the End
There are a number of uses for clever tools like Cowrie. Hopefully, you can see the value of honeypots, whether it be for security research or as an early warning tool on a LAN.
In the past, I’ve used honeypots to be more active at denying access to external resources for a short period of time (rate limiting essentially), so that after a few alerts a human could figure out if the issue was serious or a misconfiguration somewhere.
If you’re more interested in malware detection, then I also suggest a sophisticated malware-catching honeypot called Dionaea, which looks readily maintained on GitHub with commits of only about a month old. Dionaea uses libemu to detect shellcodes and supports Ipv6 and TLS. If Dionaea appears complex, then fret not as the documentation looks excellent.
I’ll leave you to decide your software preference as a few are available. I trust you to find an ISP or host that allows you to run honeypots responsibly and then to find a way to put them to good use.
« Previous 1 2 3
Buy Linux Magazine
US / Canada
UK / Australia
Direct Download
Read full article as PDF:
Subscribe to our Linux Newsletters
Find Linux and Open Source Jobs
Subscribe to our ADMIN Newsletters
News
-
KDE Plasma 6 Looks to Bring Basic HDR Support
The KWin piece of KDE Plasma now has HDR support and color management geared for the 6.0 release.
-
Bodhi Linux 7.0 Beta Ready for Testing
The latest iteration of the Bohdi Linux distribution is now available for those who want to experience what's in store and for testing purposes.
-
Changes Coming to Ubuntu PPA Usage
The way you manage Personal Package Archives will be changing with the release of Ubuntu 23.10.
-
AlmaLinux 9.2 Now Available for Download
AlmaLinux has been released and provides a free alternative to upstream Red Hat Enterprise Linux.
-
An Immutable Version of Fedora Is Under Consideration
For anyone who's a fan of using immutable versions of Linux, the Fedora team is currently considering adding a new spin called Fedora Onyx.
-
New Release of Br OS Includes ChatGPT Integration
Br OS 23.04 is now available and is geared specifically toward web content creation.
-
Command-Line Only Peropesis 2.1 Available Now
The latest iteration of Peropesis has been released with plenty of updates and introduces new software development tools.
-
TUXEDO Computers Announces InfinityBook Pro 14
With the new generation of their popular InfinityBook Pro 14, TUXEDO upgrades its ultra-mobile, powerful business laptop with some impressive specs.
-
Linux Kernel 6.3 Release Includes Interesting Features
Although it's not a Long Term Release candidate, Linux 6.3 includes features that will benefit end users.
-
Arch-Based blendOS Features Cool Trick
If you're looking for a Linux distribution that blends Linux, Android, and web apps together, blendOS might be what you're looking for.