MISP
/
misp-taxonomies
mirror of https://github.com/MISP/misp-taxonomies
2
0
Fork 0
Code Issues Releases Wiki Activity

chg: [honeypot-basic] medium interaction added (based on various papers definition from EURECOM to Georg Wicherski paper)

pull/119/head
Alexandre Dulaunoy 2018-09-24 15:46:53 +02:00
parent bd01ea8b32
commit 0c4cdac38d
No known key found for this signature in database
GPG Key ID: 09E2CD4944E6CBCD
1 changed files with 8 additions and 3 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

11
honeypot-basic/machinetag.json
View File

@ -1,7 +1,7 @@
{ {
"namespace": "honeypot-basic", "namespace": "honeypot-basic",
"description": "Updated (CIRCL and Seamus Dowling) from Christian Seifert, Ian Welch, Peter Komisarczuk, ‘Taxonomy of Honeypots’, Technical Report CS-TR-06/12, VICTORIA UNIVERSITY OF WELLINGTON, School of Mathematical and Computing Sciences, June 2006, http://www.mcs.vuw.ac.nz/comp/Publications/archive/CS-TR-06/CS-TR-06-12.pdf", "description": "Updated (CIRCL, Seamus Dowling and EURECOM) from Christian Seifert, Ian Welch, Peter Komisarczuk, ‘Taxonomy of Honeypots’, Technical Report CS-TR-06/12, VICTORIA UNIVERSITY OF WELLINGTON, School of Mathematical and Computing Sciences, June 2006, http://www.mcs.vuw.ac.nz/comp/Publications/archive/CS-TR-06/CS-TR-06-12.pdf",
"version": 3, "version": 4,
"predicates": [ "predicates": [
{ {
"value": "interaction-level", "value": "interaction-level",
@ -43,10 +43,15 @@
"expanded": "High Interaction Level", "expanded": "High Interaction Level",
"description": "Exposed functionality of the honeypot is not limited." "description": "Exposed functionality of the honeypot is not limited."
}, },
{
"value": "medium",
"expanded": "Medium Interaction Level",
"description": "Exposed functionality of the honeypot is limited to the service without exposing the full operating system."
},
{ {
"value": "low", "value": "low",
"expanded": "low Interaction Level", "expanded": "low Interaction Level",
"description": "Exposed functionality being limited. For example, a simulated SSH server of a honeypot is not able to authenticate against a valid login/password combination" "description": "Exposed functionality being limited. For example, a simulated SSH server of a honeypot is not able to authenticate against a valid login/password combination."
}, },
{ {
"value": "none", "value": "none",