HoneySens
The IT systems of the regional government authority of Saxony are not just threatened directly from the Internet, but may also become the target of attacks emerging from the internal network itself. That is often caused due to systems affected by malware, but co
uld also be a result of attackers that got remote access to the internal network or even employees who try to do harm to the infrastructure by defying their own security clearance. Traditional security measures, such as firewalls or anti-virus engines, can't react accordingly to all of these threats.
HoneySens is a research project of the Chair of Privacy and Data Security in cooperation with the Ministry of the Interior of Saxony. Our goal is the conception and development of a sensor network to automatically detect threats from "within the network" utilizing various kinds of honeypots and to give sufficient notice of security breaches to responsible authorities. The main focus of this project are to scale the honeypot network to large IT infrastructures with thousands of nodes, the transparent integration of
the resulting security solution into existing networks and a flexible adoption of the individual honeypot nodes to their surrounding network domain. Since January of 2016 our solution is successfully deployed within the network of the Federal Government of Saxony and also at the campus of the TU Dresden for testing purposes. With the beginning of 2017 we were also able to partner with T-Systems Multimedia Solutions GmbH who offer HoneySens as a managed service to their customers and also publish their adjustments to the project under an OpenSource license.
Further information: https://honeysens.de/