Honeybee available

Some sales blurb regarding a diploma thesis recently finished at the 
Laboratory for Dependable Distributed Systems at RWTH-Aachen University.
We created a semi-atomated honeyd plugin generator which might be of 
interest to some of the list members.
---8<-----------------------------------------------
Honeybee Released
Posted Tue Jun 21 17:22:28 CEST 2005 by Maximillian Dornseif
In his Diploma Thesis Thomas Apel created a tool for automatically 
generation plug-ins for honeyd based on the behavior of real servers. 
His tool called ???Honeybee??? is now available to the public.
For Honeypots to be effective they have to simulate a wide variety of 
network services. Generating such simulations by hand is a daunting 
task. An automated system for fingerprinting known servers for common 
network protocols like Telnet, SMTP, POP3, IMAP4, FTP and HTTP would 
facilitate deployment of varying honeypots trendemously.
Honeybee is such a tool. It can semi-automatically create emulators of 
network server applications. The resulting emulators can be used 
together with the honeypot application Honeyd. The emulators should be 
able to withstand the most common fingerprinting attempts.
Honeybee consists of two parts: A scanner and a generic emulators per 
protocol. The Honeybee scanner talks to a real server and extracts its 
personality. This personalities are stored in database files and are 
used to control the generic emulator. The generic emulators use 
Honeyd?s interface for Python plug-in.
Further Information is available at 
http://lufgi4.informatik.rwth-aachen.de/diplomas/show/6

---8<-------------------------------------


Regards

Maximillian Dorrnseif

-- 
Maximillian Dornseif, Dipl. Jur., CISSP
Laboratory for Dependable Distributed Systems, RWTH Aachen University
Tel. +49 241 80-21431 - http://md.hudora.de/