Deploying Honeypots To Gather Actionable Threat Intelligence

No ratings

Presented at CircleCityCon 2015 by

James Taliento

Threat Intelligence seems to be all the rage. There are tons of security vendors selling threat intelligence and products to support data collection and analysis, but what about localized actionable intelligence? This analysis will revisit the implementation of high-interaction honeypots in a production setting and how (iff properly deployed) this data can be used to respond to incoming threats as they arise. This talk will discuss the do’s and don’ts of integrating honeypots into your environment and how to obtain critical (actionable) insight from honeypot activity using open source tools.