OWASP 20th Anniversary Event

Abstract:We’ve collected over 9 million events from hundreds of web honeypots around the world for past 52 months. This session will present the results of our analysis of that data to help answer the question: what attacks should I expect?Using this honeypot data, we’ve been able to identify specific CVEs being targeted in large global attack campaigns. From this, we have clues on attacker tactics regarding which platforms and technologies receive attention time after time, and which fade from usage. This kind of data is vital in building a data-driven defense.Attendees also learn what kinds of attack are commonplace on the Internet, so the ones targeting them uniquely will stand out. We will explain techniques to investigate and classify web attack log traffic at scale.To quote Deming: In God we trust. Everyone else, bring data. We’re bringing the data.

Dates

Author

Conferences

Tags

Looking at 4 years of web honeypot attacks: tactics, techniques and trends

tldr - powered by Generative AI