Honeypots 2.0: A New ‘Twist’ on Defending Enterprise Networks
summary
Describes a practical honeypot system built in Python using Twisted that spins up full HTTP and Modbus servers, serves a response header then tears them down after configurable intervals (examples 20–25s), and orchestrates many ephemeral instances via containers/Kubernetes to create dynamic IP/port churn. Claims this increases attacker dwell time and cost, shows working code (Dynamic Deception Toolkit on GitHub), contrasts lightweight headers-only traps with heavyweight protocol emulation, and reports observable attacker confusion during tests.
AI-written summary · about
chapters (20)
- 0:00Introduction
- 1:21Industrial Internet of Things
- 2:18Digital Twin
- 2:44Cyber Security
- 3:06Dynamic Deception
- 4:09Types of Deception
- 4:30Signal Injection
- 5:04What is a Honeypot
- 6:54Goals of Honeypots
- 7:39Insider Threat
- 12:04Python Implementation
- 13:11Output
- 14:09Code Complexity
- 14:45Twisted
- 15:47Twisted Example
- 18:50Lesson 19 Less Than 20 Lines of Code
- 19:01Lesson 19 Dynamic Example
- 20:11Modbus Example
- 21:33Scaling
- 22:03Conclusion
related talks
35mCyber Deception 2.0: Adaptive Honeynets and Canary Intelligence in Production
15mOn Design and Enhancement of Smart Grid Honeypot System for Practical Collection...
26mWeb Honeypot Project
34mWhat Minesweeper Can Teach Us About Security
32mFaking a Factory: Creating and Operating a Realistic Honeypot
31mWeb Application Honeypot Threat Intelligence
30mYou See Honey, I See Beehive: Developing Honey Networks
46mApplied Deception Beyond the Honeypot: Moving Past 101