Micro Honeypot for RPi

Mentor: Willem Van Iseghem

Introduction

PiPot is a honeypot server which pretends as a potential target for attackers from network and collect the attack data. It also has the ability to deploy more instances to make it harder to get information from the real one. The goal of this GSOC project is to improve the functionality and scalability of the current PiPot.

Links

Project repo - https://github.com/PiPot

Completed work(PR)

• Server Development(Every new feature is covered with unit test)
  • Create and run server inside python virtualenv
    • set up virtualenv for server
  • Run PiPot on non-Arm platform like RPi
    • allow user specific network interface
    • suppot image deployment on non-Arm platform
  • Allow container-based service uploading
    • container based service upload
  • Allow dynamic data report update
    • dynamic report update
  • Allow service version update
    • fix service cannot upload properly
    • add service manager interface, upgrade from old to newer models from updated service
    • add test on invalid test update
• Continuous Integration
  • travis setup, add test database setup and with some basic tests
  • notification management test
  • add codecov
  • start sql service explicity on travis
• Python2 to Python3 migration
  • update enum attribute for sqlalchemy table
  • fix enum attribute iteration issue due to python3 update

Usage

To install pipot, please follow the installation section. When install sever, answer each question carefully to set up the right config. If you want to run the pipot server locally for test, you can simply run python run.py under server. (Assume you don't use localhost as IP address in installation, otherwise you need to close nginx by service nginx stop to free the address)

Future work

• have container based notification uploading, ideally check the requirement before actually applied to pip install
• develop tests to improve the test coverage
• update the image deployment to support the latest Raspberry Pi model
• set up a mailing notification service to report the collected data
• password change/get back user name using mail verification