1st NoAH Workshop

The 1st NoAH workshop was held on 17 May 2006 in Catania, Italy (in conjunction with TNC 2006).

This workshop presented the pilot honeypot infrastructure being developed by the NoAH project. It also outlined the techniques being developed for the automatic identification of cyberattacks, and the mechanisms used to distribute this information to firewalls and other containment systems.

11.00-12.30   Chair: Kevin Meynell, TERENA

• Introduction to NoAH: a European Network of Affined Honeypots - Evangelos Markatos, FORTH
• Argos: an Emulator for Capturing Zero-Day Attacks - Herbert Bos, VU
• Defending against Polymorphic Attacks: Recent Results and Open Questions - Michalis Polychronakis, FORTH

14.00-15.30   Chair: Catalin Meirosu, TERENA

• Practical Experiences with the deployment of honeypots - Jan Kohlrausch, DFN-CERT
• Towards Automated Botnet Detection and Mitigation - Thorsten Holz, University of Mannheim
• Vigilante: End-to-End Containment of Internet Worms - Manuel Costa, Microsoft Research

16.00-17.30   Chair: Evangelos Markatos, FORTH

• Honeyd Virtual Honeypots and their Applications - Niels Provos, Google Inc
• Finding Vulnerabilities in Web Applications - Christopher Kruegel, Technical University Vienna
• Policy, Technology and Regulation - Ilias Chantzos, Symantec