sane 2006
Invited Talk
Time: Friday 19 May 2006 11:30 - 12:15 Location: Collegezaal A
Honeypots: The latest trends, findings, and technologies

Abstract

Information security threats are constantly advancing, adapting, and evolving, so to are honeypots. This technical presentation will cover the latest tools in the world of honeypots, including honeynets, client honeypots, and distributed deployments. We will not only discuss the value and concepts of these tools, but how they work at a technical level. In addition, we will cover what we have learned about threats, including trends over the past several years, some of the latest threats we have captured, and where we think the future lies.


Lance Spitzner
The Honeynet Project

Founder and President, The Honeynet Project.

Lance Spitzner is a geek who loves information security. It is a constantly changing battle, your job is to defend against the bad guys. This love for tactics first began in the Army, where he served for seven years, four as an Armor officer in the Army's Rapid Deployment Force. Following the military he received his M.B.A and became involved in the world of information security. Now he defends organizations with IP packets as opposed to 120mm SABOT rounds.

His passion is researching honeypot technologies and using them to learn more about threats. He is founder of the Honeynet Project, moderator of the honeypot maillist, author of "Honeypots: Tracking Hackers", co-author of "Know Your Enemy" and author of numerous whitepapers. He has also spoken at various conferences and organizations, including SANS, Blackhat, FIRST, the Pentagon, the FBI Academy, the President's Advisory Board, the Army War College, Department of Justice, and Navy War College.


Georg Wicherski
German Honeynet Project

Georg Wicherski is an 18-year old German highschool graduate with experience in the fields of botnet tracking and mitigation, malware analysis and network engineering. He co-authored the Honeynet Project's paper "Know Your Enemy: Tracking Botnets" and two papers submitted to ESORICS and DFN-Cert Workshop.
He also published his paper "Medium Interaction Honeypots" on the Internet. His fields of interest besides malware and botnets include robotics engineering and programming as well as wireless appliances.

He is the author of the mwcollectd medium-interaction-honeypot and part of nepenthes development team. He founded and now leads the mwcollect Alliance, a non-proifit organization aiming at collecting malware with now over 19500 unique in-the-wild samples.

You can find the entrance to the web of his personal pages at www.pixel-house.net, most of his projects are listed and linked there.



Last modified: Mon, 23 Jan 2006 22:36:51 +0100