Temporal: Looking at 4 years of web honeypot attacks: tactics, ... - Malcolm Heath • Raymond Pompon
Channel: OWASP Foundation
Date: 2022-01-06

Temporal: Looking at 4 years of web honeypot attacks: tactics, techniques and trends

SPEAKERS
Malcolm Heath • Raymond Pompon

ABSTRACT
We’ve collected over 9 million events from hundreds of web honeypots around the world for the past 52 months. This session will present the results of our analysis of that data to help answer the question: what attacks should I expect?

Using this honeypot data, we’ve been able to identify specific CVEs being targeted in large global attack campaigns. From this, we have clues on attacker tactics regarding which platforms and technologies receive attention time after time, and which fade from usage. This kind of data is vital in building a data-driven defense.

Attendees also learn what kinds of attacks are commonplace on the Internet, so the ones targeting them uniquely will stand out. We will explain techniques to investigate and classify web attack log traffic at scale.
To quote Deming: In God we trust. Everyone else, bring data. We’re bringing the data.

Managed by the OWASP® Foundation
https://owasp.org/