Network Security with Cowrie Honeypot Logfiles Analysis

My book delves into the increasing importance of safeguarding digital networks and how honeypots, particularly the Cowrie honeypot, can serve as effective tools for network security. Honeypots are decoy systems intentionally made to appear vulnerable in order to attract cyberattackers, thereby diverting them from real systems and enabling the collection of data about Malicious intruders techniques.This research primarily focuses on Cowrie, a medium-to-high interaction honeypot designed to capture brute force attacks, particularly targeting SSH and Telnet protocols.The analysis involves the deployment of Cowrie on the Google Cloud Platform, where it interacts with attackers, logging detailed information about attack methods, command inputs, and attempted breaches.The book explores the analysis of these logs to uncover patterns in attack behavior, malicious tools, and even emerging threats. By studying this data, the research aims to enhance understanding of cyber threats and improve defensive measures. Challenges like the vast amount of log data and security breaches during data collection are discussed, the complexities of data analysis and visualisation.

Autorentext

Ich bin ein zertifizierter PECB ISO27001 Implementer mit einem MSc Cybersecurity (Distinction) und einem Hintergrund in Maschinenbau. Ein SOC-Analyst, dessen Fachwissen die Echtzeitüberwachung mit SIEM-Tools, die Analyse des Netzwerkverkehrs und die Verwaltung von Tickets für Zwischenfälle umfasst. Ausgeprägte Kenntnisse in den Bereichen Bedrohungserkennung, Cloud-Sicherheit sowie Identitäts- und Zugriffsmanagement.