Internet on Laboratoire de Haute Sécurité

PNC

frederic.beck@inria.fr (Frederic Beck) — Thu, 09 Jan 2025 00:00:00 +0000

Internet Experimentation Programmable Networks

PNC

The platform is designed for evaluating various technologies, including programmable networks, orchestration, and cybersecurity threats. It supports a wide array of dataplane technologies, such as P4, OpenFlow, DPDK, eBPF, and XDP.

Contact

Frederic Beck

frederic.beck@inria.fr

Darknet

frederic.beck@inria.fr (Frederic Beck) — Thu, 06 Jun 2024 00:00:00 +0000

Internet Monitoring Passive listening PCAP CSV

Darknet

Monitoring unused address space, or Darknet, consist in capturing all traffic towards a set of ip adresses directly connected to Internet, without any active computer connected. All inbound traffic is unsolicited.

Thanks to our Darknet using 4096 contiguous public IP addresses, we can mesure networks attack on internet in real time, and especially large scale phenomena such as Internet wide port scanning, DDoS backscatter or DNS amplification attempts.

Honeypot Binaries

frederic.beck@inria.fr (Frederic Beck) — Thu, 06 Jun 2024 00:00:00 +0000

Internet Honeypots Low Interaction Malware Binary

Honeypot Binaries

Our distributed honeypot platform based on TPot allows us to operate various sensors running up to 20+ honeypots each, centralizing the collect traces, logs and binaries in the LHS. The collected data is indexed in realtime in an Elasticsearch cluster.

Probes are placed on various dedicated network connections in the LHS, in the cloud or in our partners networks, thanks to the CyberGenAI joint project with DFKI (Germany) and OMU (Japan).

Honeypot Logs

frederic.beck@inria.fr (Frederic Beck) — Thu, 06 Jun 2024 00:00:00 +0000

Internet Honeypots Low Interaction Logs JSON

Honeypot logs

Probes are placed on various dedicated network connections in the LHS, in the cloud or in our partners networks, thanks to the CyberGenAI joint project with DFKI (Germany) and OMU (Japan).

Honeypot Traces

frederic.beck@inria.fr (Frederic Beck) — Thu, 06 Jun 2024 00:00:00 +0000

Internet Honeypots Low Interaction PCAP Traces

Honeypot traces

Probes are placed on various dedicated network connections in the LHS, in the cloud or in our partners networks, thanks to the CyberGenAI joint project with DFKI (Germany) and OMU (Japan).

Darknet

frederic.beck@inria.fr (Frederic Beck) — Wed, 05 Jun 2024 00:00:00 +0000

Internet Monitoring Passive listening

Passive Internet monitoring

Distributed honeypots

frederic.beck@inria.fr (Frederic Beck) — Wed, 05 Jun 2024 00:00:00 +0000

Internet Monitoring Honeypots

Distributed honeypots platform

Our distributed honeypot platform based on Tpot allows us to operate various sensors running up to 20+ honeypots each, centralizing the collect traces, logs and binaries in the LHS. The collected data is indexed in realtime in an Elasticsearch cluster.

Probes are placed on various dedicated network connections in the LHS, in the cloud or in our partners networks, thanks to the CyberGenAI joint project with DFKI (Germany) and OMU (Japan).

Hoplab

frederic.beck@inria.fr (Frederic Beck) — Wed, 05 Jun 2024 00:00:00 +0000

Internet Honeynet Honeypots

Hoplab

In a joint work with the LHS at Rennes, HopLab allows easy and flexible creation and deployment of honeypots and honeynets by using high level descriptions of attack paths in a real network.

Contact

Alexandre Sanchez

alexandre.sanchez@inria.fr

Network Scanning

frederic.beck@inria.fr (Frederic Beck) — Wed, 05 Jun 2024 00:00:00 +0000

Internet Scanning Scrapping Active probing

Active Internet probing

Using a dedicated and whitelisted subnet with 16 public addresses, we are able to actively probe the Internet and map open ports, SSL/TLS certificates or other information, without disturbing the targets of these activities.

Web scraping experiments have recently started, with the objective of gathering and analyzing data of public proxies, trackers...

Network Telescope

frederic.beck@inria.fr (Frederic Beck) — Wed, 05 Jun 2024 00:00:00 +0000

Internet Monitoring Passive listening

Passive Internet monitoring

The network telescope allows to deploy passive probes directly on the Internet, and capture traces (traffic, application logs...), whatever the size of the data.

Probes are placed on a dedicated network connection on which we control the firewall.

Collected data can be stored, replicated and indexed in realtime.

Contact

Frederic Beck

frederic.beck@inria.fr

Internet on Laboratoire de Haute Sécurité

PNC

PNC

Links

Contact

Darknet

Darknet

Honeypot Binaries

Honeypot Binaries

Honeypot Logs

Honeypot logs

Honeypot Traces

Honeypot traces

Darknet

Passive Internet monitoring

Distributed honeypots

Distributed honeypots platform

Hoplab

Hoplab

Links

Contact

Network Scanning

Active Internet probing

Network Telescope

Passive Internet monitoring

Links

Contact