MISP
/
misp-taxonomies
mirror of https://github.com/MISP/misp-taxonomies
2
0
Fork 0
Code Issues Releases Wiki Activity

chg: [honeypot-basic] updated to include no-interactive honeypot + network capture as data collection

pull/115/head
Alexandre Dulaunoy 2018-08-31 07:19:41 +02:00
parent 9521831135
commit 6256502143
No known key found for this signature in database
GPG Key ID: 09E2CD4944E6CBCD
1 changed files with 12 additions and 2 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

14
honeypot-basic/machinetag.json
View File

@ -1,7 +1,7 @@
{ {
"namespace": "honeypot-basic", "namespace": "honeypot-basic",
"description": "Christian Seifert, Ian Welch, Peter Komisarczuk, ‘Taxonomy of Honeypots’, Technical Report CS-TR-06/12, VICTORIA UNIVERSITY OF WELLINGTON, School of Mathematical and Computing Sciences, June 2006, http://www.mcs.vuw.ac.nz/comp/Publications/archive/CS-TR-06/CS-TR-06-12.pdf", "description": "Updated from Christian Seifert, Ian Welch, Peter Komisarczuk, ‘Taxonomy of Honeypots’, Technical Report CS-TR-06/12, VICTORIA UNIVERSITY OF WELLINGTON, School of Mathematical and Computing Sciences, June 2006, http://www.mcs.vuw.ac.nz/comp/Publications/archive/CS-TR-06/CS-TR-06-12.pdf",
"version": 1, "version": 2,
"predicates": [ "predicates": [
{ {
"value": "interaction-level", "value": "interaction-level",
@ -47,12 +47,22 @@
"value": "low", "value": "low",
"expanded": "low Interaction Level", "expanded": "low Interaction Level",
"description": "Exposed functionality being limited. For example, a simulated SSH server of a honeypot is not able to authenticate against a valid login/password combination" "description": "Exposed functionality being limited. For example, a simulated SSH server of a honeypot is not able to authenticate against a valid login/password combination"
},
{
"value": "none",
"expanded": "No interaction capabilities",
"description": "No exposed functionality in the honeypot."
} }
] ]
}, },
{ {
"predicate": "data-capture", "predicate": "data-capture",
"entry": [ "entry": [
{
"value": "network-capture",
"expanded": "Network capture",
"description": "The honeypot collects raw network capture."
},
{ {
"value": "events", "value": "events",
"expanded": "Events", "expanded": "Events",