After a few slow days for student applicants everywhere, and some difficult decisions on the final slot allocations for our mentors, the long wait is finally over and the GSoC 2010 official student selections are public. The Honeynet Project are very excited to have received 17 GSoC slots this year (up from 9 last year), so many thanks to Google for their fantastic support again this year.

We hope that this summer will see significant development on both low and high interaction honeypots, as well as with supporting tools. During the next few weeks of the community bonding period we’ll be helping our students and mentors prepare for their projects and engage with our members. Once development officially begins on May 24th we’ll be having regular blogs here from all of our students again, along with regular summaries of progress on our GSoC projects.

Student applications for Google Summer of Code 2010 closed at 19:00 UTC tonight, with the usual last minute rush of submissions (but thankfully no timezone confusion this time). We had thought that receiving three student applications in the final minute, including one with 8.4 seconds to spare was cutting it close, but Plan9 apparently had one lucky applicant with 1.23 seconds remaining on the clock! That must set a new GSoC record… ;-)

On March 29th Google officially began accepting applications from students for Google Summer of Code 2010, which the Honeynet Project is very exicted to be participating in again this year as a mentoring organisation. We’ve recently updated our project ideas page and mentor information and students have until 19:00 UTC on Friday April 9th to apply (you can either chose one of our ideas or propose your own).

If you are interested in applying to be a student and you haven’t already said hello on #gsoc-honeynet on irc.freenode.net then please pop by if you have any questions. Most people find speaking to a project mentor before they apply helps them understand more about what is required to write a good application and we are always happy to answer questions (although please remember that since our members come from chapters all round the world it might take a few hours for someone to respond.

Much to the excitement of students all around the world, tonight Google officially announced which mentor organisations have been accepted for Google Summer of Code (GSoC) 2010, and the Honeynet Project are delighted to have been selected as one of 151 such mentoring organisations! You can view the full list here:

http://socghop.appspot.com/gsoc/program/accepted_orgs/google/gsoc2010

Fingers crossed we’ll that with Google’s continued support we’ll have the chance to once again meet some very motivated students, create some exciting new projects and gain some great new members over the coming months.

Well, Google Summer of Code 2010 is now officially up and running, with the deadline for organisation applications closing 45 minutes ago. Happily the Honeynet Project’s application for GSoC 2010 was submitted on time, so all we can do now is sit back and wait until March 18th to find out if we are one of the lucky organisations selected this year.

In the mean time, you can find out more about The Honeynet Project’s hopefully successful organisation application in the GSoC 2010 section of our website. This includes background information, ideas for potential project (although students are also free to propose their own), our student application form and how to get in touch with us if we are accepted by Google. You can also read more about the various successful projects from GSoC 2009 in this summary report.

Last year the Honeynet Project entered Google Summer of Code (http://socghop.appspot.com/gsoc/program/home/google/gsoc2009) for the first time. We received 9 Google funded student places and also funded 3 more places of our own, all of whom successfully completed their projects in a wide range of areas of open source security R&D. You can find out more in our Google SoC 2009 section of our website (https://www.honeynet.org/gsoc).

The time-line for GSoC 2010 has now been made public (http://socghop.appspot.com/document/show/gsoc_program/google/gsoc2010/timeline) and organisational applications will be held between March 8 - March 13th, with the Honeynet Project hoping to be accepted for at least as many student places as last year.

Hi all:

       I have finished almost all the coding stuff of Project #1, now you can try out the new PHoneyC with shellcode/heapspray detection here:

http://code.google.com/p/phoneyc/source/browse/phoneyc#phoneyc/branches/phoneyc-honeyjs

        Please feel free to report any bug or suggestion on shellcode/heapspray detection to me.

        As Geng and his partner is still working on the DOM simulation of PHoneyC (Project #2), I will do more test and write an overall introduction to the ideas and structure of the new PHoneyC after merging in his final commit.

Mid-term Report on PHoneyC GSoC project 1

Introduction

PHoneyC is a low-interaction honeyclient written by Jose Nazario. The
shellcode (SC for short) and heapspray (HS for short) detection module
for PHoneyC is listed on the GSoC this year and I feel lucky to be
chosen to implement it. This report is the main idea about how to
detect SC/HS in PHoneyC and how to build and run this version of
PHoneyC. Note that this module (I call it honeyjs) is far from
complete currently and this report is only for midterm evaluation. So
it is possible that the way to build and run it won’t work in the
future.

One project mentored by the Honeynet Project during GSoC aims at improving nebula, an automated intrusion signature generator. There are two critical components in the signature generator: A clustering engine that groups similar attacks into classes, and a signature assembler that extracts common features and selects some of them for the actual signature.

The first work package’s goal is to improve the overall signature quality. This can be achieved by tuning the core components, i.e. the clustering and the signature assembler. Further, nebula looses all states upon restart in its current version. The second goal is to make nebula state-aware and add the ability to save and load states.

Hello all!

Currently I’m very busy in hard work on PicViz gsoc tasks, nevertheless I still taking arbitrary tickets (tasks that I not proposed for gsoc) of this tool. Some bit but very useful features  were done.

For first picviz-gui has a set of rows that shows data about plotted events and have a slider for hide events. I got a ticket that required connection about these, i.e., when user moves the slider Picviz should hide the rows (data) that makes reference about event. And now this is done!