HPW2012 - Thug: a new low-interaction honeyclient - Angelo Dell'Aera
Channel: The Honeynet Project
Date: 02/04/2012

The number of client-side attacks has grown significantly in the past few years shifting focus on poorly protected vulnerable clients. Just as the most known honeypot technologies enable research into server-side attacks, honeyclients allow the study of client-side attacks. A complement to honeypots, a honeyclient is a tool designed to mimic the behavior of a user-driven network client application, such as a web browser, and be exploited by an attacker's content. The talk will describe the theoretical and practical steps required to design and realize a low-interaction honeyclient. During the talk, a new Honeynet Project low-interaction honeyclient (project name "Thug") aimed at mimicing the behavior of a web browser, will be publicly presented and released.