Survey: Honeypots and Honeynets in University Environments Institute

[Dave Dittrich <dittrich () u washington edu>]

Hello all,

I would like to gauge the market for a three day "Institute" on
Honeypots and Honeynets in University Environments.  Members of the
Honeynet Project and Honeynet Alliance occasionally speak about
Honeypots and Honeynets, but have never done a specific multi-day
workshop (with lecture and hands-on demonstration/experimentation),
focusing on the application of Honeypots and Honeynets within the
University research and educational community.

The hosts would be the University of Washington Information School,
UW Educational Outreach, and the UW Center for Information Assurance
and Cybersecurity.  The venue would be the University of Washington
campus.  The cost would be somewhere in the range of $550 (w/o food)
to $800 (w/food) per person, which includes admission, continental
breakfasts and lunches (at the higher price), and a bound set of
slides and other handout materials.  The time would most likely be
during the months of September or later in autumn, e.g., the first
half of November (UW classes begin in September, but I know some
schools open in late August.)

UW Educational Outreach has done similar Institutes, including a
popular one on Geographic Information System data and applications.
You can find the web page for that event (which would be similar
in form to what I am proposing for Honeynets) here:

        http://www.outreach.washington.edu/ext/special/images/

The intended audience would be:

        o Incident Response Teams (IRTs) and Security Operations groups
        o Network Administrators who want to augment their existing
          firewalls, IDSs, and AV implementations
        o Information Assurance Researchers
        o Information Assurance Educators

Proposed topics would include:

        o An overview of the Honeynet Project
        o Second Generation Honeynets
        o Deploying Honeynets
        o Overview of the Honeywall CD-ROM
        o Honeynets outside the US (e.g., Pakistan)
        o Data Collected by Honeynets and its Use in Research
        o Privacy and Anonymization of Data for Publishing Research Results
        o Risks and Legal Issues
        o University Policy Issues
        o Tips for Building Distributed Honeynets
        o The Manuka Honeypot (Clean/Compromised) System Image Database
        o Honeypot and Honeynet Forensic Analysis
        o Uses of Honeypots/Honeynets to Enhance Security and
          Incident Response
        o Hands-on Sessions
            o Setting up a Honeynet using the Honeywall
            o Customizing the Honeywall CD-ROM
            o Using the Manuka Honeypot Database

If you think you would be interested, please reply directly to me with
answers to the following questions:

--------------------------------------------------------------------------
o Would you be interested in attending such an institute? [y/n]

o How many people from your organization would attend?

o What would you consider the ideal length? [1/2/3 days]

o Which days would you prefer [W-Th-Fri/Thu-Fri-Sat/Fri-Sat-Sun/other]

o Which of the following Institute times would NOT appeal to you:
  (a) September, 2004;
  (b) first half of November 2004; or
  (c) latter half of June 2005

o Would you prefer a lower price w/o food, or higher price with food?

o Would you be interested in presenting, and on what topic?

o Which topics are you most interested in?

o Which would you remove from the list?

o Are there any other topics you'd like to see covered?

o Any other comments:

--------------------------------------------------------------------------

Thanks for your time.

P.S.  Please leave the subject line as-is when you reply directly to
me (not the list).  Thanks.

--
Dave Dittrich                           Information Assurance Researcher,
dittrich () u washington edu               The iSchool
http://staff.washington.edu/dittrich    University of Washington

PGP key      http://staff.washington.edu/dittrich/pgpkey.txt
Fingerprint  FE97 0C57 0843 F3EB 49A1  0CD0 8E0C D0BE C838 CCB5

--
Dave Dittrich                           Information Assurance Researcher,
dittrich () u washington edu               The iSchool
http://staff.washington.edu/dittrich    University of Washington

PGP key      http://staff.washington.edu/dittrich/pgpkey.txt
Fingerprint  FE97 0C57 0843 F3EB 49A1  0CD0 8E0C D0BE C838 CCB5