A HoneyNet Environment for Analyzing Malicious Actors

A honeypot is a web application or other resource that is deceptively constructed to log actions of its users, most (but not all) of whom can be assumed to be malicious actors. A honeynet is a network of honeypots. Thanks to their inter-connectedness, honeynets allow for vast amounts of data to be collected for analysis. In this paper we discuss how we came to build a honeynet, its design and implementation, and a few insights gained by analyzing attack data gathered from it.