Diverging Deception Designs: Honeypots and tokens in modern networks
Channel: LinuxConf [ZA]
Date: 11/10/2018

Jason Bissict, Marco Slaviero

https://linuxconf.co.za/#schedule

Honeypots have seen a long incubation since they were first publicised in the 80s. The turn of the century saw renewed interest, but it's only now that they're starting to help organisations stay safe(r). Legacy Open Source honeypots focus on providing logs of attacker behaviour, which is not where the true value of honeypots is to be found.
 We run two projects, OpenCanary and Canarytokens. In the talk we'll demo the software, discuss what sets them apart from similar tools, introduce new features, and show how they can help organisations improve their detection capabilities. Along the way we'll touch on our experiences in running the projects, briefly chat licensing (of course!) and expand on lessons learned in running a free Canarytokens instance. We'll end by explaining how our two Open Source projects run in parallel with (and are supported by) our commercial offering.
  If you're looking to introduce or augment breach detection in your organisation, or just want to hear from folks who've combined building Open Source projects into their day jobs, this is the talk for you.

LinuxConf [ZA] 2018 is a one-day conference aimed at the Linux and Open Source community within South Africa. It provides anyone working on or with Linux and Open Source tools & applications, or with a passion for Open Source development, to discover new trends, network with like-minded individuals, irrespective of whether the attendees are developers, system or database administrators, or anyone else working with Linux and Open Source applications.