THE EVOLUTION OF THE HONEYPOT

Honeypots have evolved from the defunct Nepenthes through its replacement, Dionaea ( https://dionaea.readthedocs.io). The resource information provided on the Github link ( https://github.com/paralax/awesomehoneypots#honeyd) is testament to the evolution of the tech, and what it’s capable of providing.

With the evolution of honeypots (collectors), a need for management and logging of the data became important. Modern Honey Network (MHN) ( https://github.com/threatstream/mhn) is a centralized server, for deploying collectors, gathering their data, and providing a web interface for management.

In 2001, the Internet Storm Center (ISC) was created following the detection, analysis, and widespread warning of the Li0n worm. The ISC provides warning services and works to combat malicious attackers by supporting a distributed detection system called DShield ( https://secure. dshield.org/about.html). DShield collects data about malicious activity from across the Internet. The service is free, sponsored by the SANS Institute for the benefit of all Internet users. The public can register to share data from their firewalls or intrusion detection systems. Registration is encouraged, but not required. The data is cataloged and summarized, and can be used to discover trends in activity, confirm attacks, or assist in making better firewall rules.