Cyber Deception 2.0: Adaptive Honeynets and Canary Intelligence in Production
summary
Claims an open source, Python single‑process adaptive grid that turns distributed honeypots into an intelligence layer, using modules for SSH/HTTP, TCP‑stack fingerprinting and PLC emulation to generate high‑confidence alerts and reduce mean‑time‑to‑detect from weeks to hours. It aggregates events into JSON case files, uses ChatGPT analysis to score intent and produce SIEM‑ready summaries, captures credentials and initial bytes, and supports mass deployment via Ansible/Puppet and integrations with Splunk, Sentinel and Elastic.
AI-written summary · about
chapters (9)
- 0:00Introduction
- 3:52Honeypot and IDS limits
- 6:20Adaptive deception tool
- 10:10AI attack analysis
- 15:05Risk scoring and forensics
- 20:00Real attacks and telemetry
- 25:21Future updates
- 27:24Open-source release
- 28:08Q&A
related talks
30mYou See Honey, I See Beehive: Developing Honey Networks
23mHoneypots 2.0: A New ‘Twist’ on Defending Enterprise Networks
44mLayers of Deception: Intrusion Detection Honeypots w/ Security Onion
15mOn Design and Enhancement of Smart Grid Honeypot System for Practical Collection...
19mDeceptive Security using Python
46mApplied Deception Beyond the Honeypot: Moving Past 101
31mWeb Application Honeypot Threat Intelligence
26mWeb Honeypot Project