Der Glastopf in den nächsten Monaten
Abgelegt unter Glastopf, Honeypot am 27 January 2010Other Languages: deutsch
Today I will talk a bit about Glastopf and whats coming up the next months.
Glastopf:
Last Friday (22.01.) I met Sven. Sven is a bachelor student at the Bern university of applied sciences and will write his thesis about Glastopf. During his work he will make a total rewrite but when he will be finished the new version will have at least the same features like the old version. Those are the goals: A much better modular structure, this means there is one core which directs every request to the modules. They store the data, emulating the vulnerability and compose the response which the core gives back to the attacker. And there will be a much better classification of incoming attacks and the rules used for that will be totally detached from the source code to distribute them easily between different sensors. I will post some details as soon we started the work. This also means that we will freeze the current unstable version to put all effort into the new version.
PHP Sandbox:
I’m working on a connection between Glastopf and a PHP sandbox to classify the collected samples. Furthermore there is the possibility to reply common requests to a Glastopf sensor with the same perfectly emulated reply from the sandbox. The collected bots have a great potential to help us to do some research on web server botnets. More postings about this topic will follow.
Project:
We are also looking forward to intense our cooperations with interested universities and corporations. Especially with 1and1 and the Bern university of applied sciences. We are also officially integrating some peoples into the project who are already working on different parts in it.
Meeting:
End of March we are planning a meeting of all peoples interested in the project in Karlsruhe Germany. Goal is to push further the discussions, exchange knowledge, get to know each other and of curse drink some beer :) . There will be also some short talks on how we go further with the project and some of us will talk about how they use Glastopf. More information and in a near future the schedule, could be found in our wiki: GlasCon-3-2010

deutsch
english