Since various colleges and universities have honeypots, why not Forensic Focus? It would be extremely useful if someone could sign up and create a team of say 10 to 20 people. Once a team has been created they could then have private access to a bittorrent page where they could share host and network based evidence with other team members.
To promote information sharing, the team could also get private access to a wiki page where each member can update the wiki showing the evidence found, how it was found and the conclusions that can be made. I'm sure everyone would at least learn something new.
As a legal layman I would think it would be legal if colleges/universities and The Honeynet Project can do it– as long as access to honeypot data is restricted.
Sure good idea. How do we sign up. Who will host this portal.
I would be really interested in following this project if it goes ahead.I may well see if my university would be interested in producing one.
That's the thing, I don't know anyone who would be interested in setting up the site. Maybe The Honeynet Project would be interested…
Welcome to the forums mamb0. Do you think there is any chance that if your university decides to create the site, that it will be available to everyone? Try to make the case for making it public for us, if you can. )
I would be interested in this however would be unable to provide any resources. Would like to follow and be involved if this kicks off though. Not very useful at this stage though…
I would be really interested in following this project if it goes ahead.I may well see if my university would be interested in producing one.
If you can approach your university, here's a selling point for Forensic Focus involvement. Where else will you get professionals in the field mentoring students?
A thought. Maybe, it's still early.
Apologies to the OP for lack of earlier reply.
Unfortunately I don't have the resources (time & tech) to dedicate to this at the moment but I'm happy to consider publicising results and other info if someone else can get things off the ground. Naturally the legal/ethical aspects would need to be addressed fairly robustly but my bigger question at this stage would be what can we do which isn't already being done/made available by other groups?
Jamie
For anyone like myself who are unsure what this is
http//
Sounds very interesting )
I understand Jamie, because I'm also lacking the time and tech, unfortunately. The reason for the site, instead of creating a new Honeynet chapter is simply the ability to reach a greater talent pool. I live in a small town and *might* be able to find a couple people who would be interested, but I think it would be a lot better (quantity and quality) if people had the ability to team up with anyone on the Internet and easily share information.
I guess I'll try contacting someone with The Honeynet Project, and see if they have any comments. That might be my best shot. Cheers!
I guess I'll try contacting someone with The Honeynet Project, and see if they have any comments. That might be my best shot. Cheers!
Yep, the last thing I want to do is be unsupportive of what is a very good idea but I'd suggest that contacting THP is probably the best course of action right now. Let us know how you get on?
Jamie