What Minesweeper Can Teach Us About Security
summary
A synthetic employee named Anna Alton is created as an OSINT honeypot and yields concrete outcomes: a 10‑person CTF falsely reports a custom server as nginx 1.18.0, SSH moved from port 22 to 24 drops ~18,000 connections to 5, and many attacks target VoIP. A recommended stack includes the open‑source honeypot Teapot and four requirements for a useful honeypot — predictable, sandboxed, monitored, actionable — enabling threat feeds, local creation, and sharing under frameworks like NIS 2.
AI-written summary · about
chapters (13)
- 0:00Introduction
- 2:10Security's restrictive approach
- 3:39Mind Sweeper flawed security
- 5:55OSINT and Anna Alton
- 8:45Phishing targets
- 12:16Security through obscurity
- 15:47Defense in depth and CTF
- 18:59Login pages as shortcuts
- 20:44Threat intelligence
- 22:31Teapot honeypot benefits
- 26:25Threat intelligence collaboration
- 28:35Cyber security renaissance
- 30:00Q&A
related talks
31mWeb Application Honeypot Threat Intelligence
32mFaking a Factory: Creating and Operating a Realistic Honeypot
26mLooking at 4 years of web honeypot attacks: tactics, ...
22mPostgreSQL Threats and Attacks in the Wild
23mHoneypots 2.0: A New ‘Twist’ on Defending Enterprise Networks
26mWeb Honeypot Project
38mExploits in Wetware
35mCyber Deception 2.0: Adaptive Honeynets and Canary Intelligence in Production