DolosHoneypot

Dolos is an SDN-based honeypot designed to detect and study malicious network activity by presenting deceptive services that appear vulnerable to attackers. It logs all interaction attempts to a PostgreSQL database for security analysis and threat intelligence gathering.

Key Features

• SDN Integration — Leverages software-defined networking to create flexible, programmable deception environments
• Deceptive Services — Simulates vulnerable network services that attract and capture attack attempts
• PostgreSQL Logging — Stores all captured attack data in a structured database for analysis
• HTTP Interface — Provides a web-based login interface that always fails to simulate authentication
• Installation Scripts — Includes distribution-specific shell scripts for easy deployment

Philosophy

Dolos follows the mythological trickster spirit's approach to cybersecurity: using deception and cunning to turn attackers' methods against them for defensive intelligence.