ullaakut / goneypot Goto Github PK

• Add prometheus reporter which implements the reporter interface
• Make it possible to pass multiple reporters to a listener
• Make it possible to specify on which port to expose prometheus metrics
  • Make sure it does not conflict with other ports

• Create a simple email reporter with configuration similar to what TravisCI does for its email notifications

Make a simple multi-stage docker image for building & running GoneyPot

• Add pre-configured Grafana dashboard that can be deployed along with the Prometheus reporter
• Dashboard should be focused on detecting anomalies among the traffic & any unusual requests
• Provide a second docker image for the dashboard
  • Should not be included in the default image, in order to keep it as light as possible

• Recognize attacks based on signature/pattern
  • Determine severity level based on known attacks
• Record unknown attacks & learn new attack patterns

• Emulate services
  • rtsp (cctv camera)
  • docker API
  • kubernetes API
  • ftp
  • git
  • http
  • mssql
  • mysql
  • ntp
  • redis
  • ssh
  • telnet