Honeypot Management

A Honeypot is an emulation of a real system, used to either prevent or detect unauthorized access, and goes on further to store logs used for forensics. As our final year project, my team and I built an automated honeypot system. The host system uses Pyvbox, a python library, that automates the process, accesses the main VirtualBox API, runs or shutdowns multiple virtual machines, triggers scripts to install either application or network vulnerabilities and retrieves the attack logs generated by Snort, an Intrusion Detection System.

This is the implementation design:

This is the algorithm: