#Honeynet2014 - Angelo Dell'Aera - Thug: low-interaction honeyclient
Channel: The Honeynet Project
Date: 2014-07-04

2014 Honeynet Project Workshop | 12-14 May 2014 | Warsaw | Poland

Speaker: Angelo Dell'Aera

Title: Thug: low-interaction honeyclient

Abstract: The number of client-side attacks has grown significantly in the past few years shifting focus on poorly protected vulnerable clients. Just as the most known honeypot technologies enable research into server-side attacks, honeyclients allow the study of client-side attacks. A complement to honeypots, a honeyclient is a tool designed to mimic the behavior of a user-driven network client application, such as a web browser, and be exploited by an attacker's content. The talk will describe the Honeynet Project low-interaction honeyclient (project name "Thug") and how to effectively use it in order to analyze malicious websites and detect potential exploit kits.

http://warsaw2014.honeynet.org/briefings.html#dellaera