CyberGuard

We are creating a LLM enhanced honeypot based on the Cowrie shell.

pages

Resources

2024-06-17 09:06 Post

Our project has officially gotten up and running. We are finally making progress with speed and boldness!

Now our honeypot is able to dynamically create systems and files as the LLM demands. That is, as the LLM responds to commands such as “ls”, the corresponding directories and files are created inside the honeypot. This then facilitates us to “lay the track before the cart” in that we create new directories and files just in time when a potential attacker would come across them.

Our next steps will be to investigate just what commands are best to re-route to the LLM. We are also looking at refining the LLM generations and making sure that the context of an attackers previous actions is preserved.

Attributes

Security
pages

Resources

2024-06-17 08:56 Code / Framework

LLM Enhanced Cowrie SSH/Telnet Honeypot https://cowrie.readthedocs.io - emsjob/cowrie_llm