South African Chapter

SSH honeypot workshop Bsides London 2013

leon.van.der.eijk — Thu, 17 Jan 2013 04:16:00 -0600

At the last BruCON conference in Ghent last year I had the pleasure to talk to Soraya (Iggi), Bsides London co-organizer. She convinced me into submitting a workshop proposal for the Bsides London 2013.

And guess what, it got accepted.

So I will be doing a workshop on setting up a basic kippo SSH honeypot from Upi Tamminen (http://code.google.com/p/kippo/) and if time permits, using Ioannis Koniaris (Ion) kippo visualization tool kippo-graph (http://bruteforce.gr/kippo-graph).
Bsides London will be held on April 24th 2013 at Kensington and Chelsea Town Hall

South African Chapter

South Africa Chapter Status Report for 2012

Barry.Irwin — Sun, 25 Nov 2012 14:46:17 -0600

ORGANIZATION

The ZA chapter has faced a busy year (non HNP) work wise. As a relatively young chapter, organisation and recruitment is still very much on the agenda. Much of the work being done is also within the Security and Networks Research Group (SNRG) at Rhodes University, of which a number of us are members.

South African Chapter

South Africa Chapter Status Report for 2011

Matt.Erasmus — Sun, 12 Jun 2011 15:24:02 -0500

ORGANIZATION

As we are a new chapter in the HoneyNet Project, there have been no changes to the organizational structure. Barry and I are working on expanding the network within South Africa in an attempt to gain more sensor nodes and hopefully track attacks over a larger area within the country.

Chapter Members:

Matt Erasmus
Matt Erasmus is in charge of the South African chapter pages on both http://honeynet.org and http://honeynet.org.za

Barry Irwin

South African Chapter

South African Chapter

Matt.Erasmus — Mon, 02 May 2011 11:12:40 -0500

Welcome to the South African Chapter.

We're starting off small with a couple of pots in South African IP space. Our focus is on malware delivered via SMB services which aren't a variant of Conficker. We also monitor SSH attacks and any malicious software originating from these compromises.

We're currently busy with completing the setup of our hosting infrastructure so the Wordpress site is just temporary.

Matt Erasmus
South African Chapter Member