Client Honeynet Project News
Capture-HPC v2.1 enables investigation of client-side computer attacks - 26-03-2008 12:37
Wellington, New Zealand
Wednesday, March 26, 2008
The Honeynet Project (http://www.honeynet.org) and School of Mathematics, Statistics and Computer Science at Victoria University of Wellington (http://www.mcs.vuw.ac.nz/) are excited to announce the release of Capture-HPC v2.1. Capture-HPC is an innovative security product that is able to find and investigate the increasing problem of client-side computer attacks. This new software release increases the features and speeds performance allowing anyone to investigate a larger range and quantity of client-side computer attacks. Capture-HPC is freely available from our web site at: https://projects.honeynet.org/capture-hpc/wiki. It is written and distributed under the GNU General Public License, v2.
Capture-HPC is a computer security product that allows anyone to: investigate client-side computer attacks; security researchers to find and study malicious servers; virus and malware researchers to collect malware pushed by malicious servers; network administrators to monitor their systems for client-side attacks; and web site operators to monitor their web sites for unauthorized modifications with client-side attack code.With version 2.1, several new features were introduced:
- 500% increase in performance over the previous version. This enables security researchers with little resources to investigate client-side attacks in an automated fashion.
- Increase in data being collected by the Capture-HPC system. Besides malware and unauthorized state changes, Capture-HPC now collects network traffic for all client/server interactions. In addition, Capture-HPC now reports statistics about the performance of the system allowing operators to monitor and tune the Capture-HPC system during operation.
- Introduction of a client plug-in framework. This framework allows third-party developers to include client applications that are currently not supported by Capture-HPC. A Safari browser plug-in that makes use of this feature is provided with the 2.1 version of Capture-HPC adding support for this browser and demonstrating the capabilities of this framework. In addition, a wide range of browsers, office applications, and media players are supported by Capture-HPC.
Capture-HPC is freely available from our web site https://projects.honeynet.org/capture-hpc/wiki. It is written and distributed under the GNU General Public License, v2. A public mailing list is available at https://public.honeynet.org/mailman/listinfo/capture-hpcproviding support and a forum to exchange configuration files, plug-ins, results, etc.
About The Honeynet Project
Founded in 1999, The Honeynet Project (http://www.honeynet.org) is an international, non-profit (501c3) research organization dedicated to improving the security of the Internet at no cost to the public. With chapters around the world, our volunteers are firmly committed to the ideals of OpenSource. Our goal, simply put, is to make a difference.About School of Mathematics, Statistics and Computer Science at Victoria University of Wellington
School of Mathematics, Statistics and Computer Science at Victoria University of Wellington (http://www.mcs.vuw.ac.nz/) is one of New Zealand's leading centers of research in each of its teaching disciplines of mathematics, statistics, operations research and computer science. The School attracts large external research grants and provides a range of services to the broader community to enhance the application of mathematical, statistical and advanced information technology in New Zealand. We utilize the knowledge generated from this cutting-edge research to create challenging, interesting and practical courses.
Contact Information:
Ralph Logan, Chief Public Relations Officer, Honeynet Project, 713-869-5162 or ralph.logan@honeynet.org
Christian Seifert, PhD Candidate, New Zealand Honeynet Project Lead, +1-206-265-1944, Christian.Seifert@gmail.comRelated links:
# http://www.honeynet.org
# http://blog.honeynet.org
# https://projects.honeynet.org/capture-hpc/wikiTerms and conditions, including restrictions on redistribution, apply.
Copyright © 1999-2008 The Honeynet Project All Rights Reserved.
New version of MITRE's HoneyClient v1.0.2 - 16-03-2008 18:28
MITRE has released a new version of their HoneyClient v1.0.2 last week. Its available from their web site at http://www.honeyclient.org/trac. There were some big changes as part of this release, such as introduction of real time integrity checks, introduction of a Ruby on Rails application to keep track of malware and centralize URL processing across different honeyclients, increased stability and improved firewall support. Its freely available under the GNU GPL v2 license.Capture and HoneyC have moved - 14-02-2008 16:54
Capture and HoneyC have moved to the new Honeynet Project's Trac system. The trac contains project documentation, release code, svn access, and bug tracking. Capture can be accessed at https://projects.honeynet.org/capture-hpc/ and HoneyC at https://projects.honeynet.org/honeyc/.New Paper Released: KYE - Behind the Scenes of Malicious Web Servers - 07-11-2007 14:23
We are excited to announce the release of a new paper of our Know Your Enemy series, KYE: Behind the Scenes of Malicious Web Servers. In this paper, we increase our understanding of malicious web servers through analysis of several web exploitation kits that have appeared in 2006/07: WebAttacker, MPack, and IcePack. Our discoveries will necessitate adjustments on how we think about malicious web servers and will have direct implications on client honeypot technology and future studies.Release of Capture-HPC 2.0 - 12-09-2007 19:38
The Client Honeynet SIG and Victoria University of Wellington are excited to announce the release of a new version of high interaction client honeypot Capture-HPC: version 2.0. There are many new exciting features in this release. The tool and the source code are available from https://www.client-honeynet.org/creleases.html. It is distributed under the GNU General Public License v2.
