This document summarizes a project that analyzes malicious activity using honeypots. The project involves deploying honeypots to monitor and record malicious activity and generate threat intelligence. It will provide a web application where users can view threat intelligence reports, the malicious activity of specific IP addresses, and visual aids like graphs and charts. The document includes block diagrams of the system architecture and components, use case diagrams, and data flow diagrams.

1. Analyzing Malicious Activity Using
Honeypot (PINJRA)
Talha Riaz
SP11-BCS-161
Haider Mahmood
FA10-BCS-126
Usama Bashir
FA11-BCS-186
Supervised By:
Dr. Amir Hayat
Co-Supervised By:
Ms. Sabah Suhail
Research Group:
Applied Security
Engineering Research
Group

2. Introduction
• Cyber Security has become a significant area
of computer science over the last few years.
• For protection of our IT assets we need to
know:
• How they are attack.
• Which IP addresses are being used.
• What types of attacks are being launched.

3. Our System
• Malicious activity monitoring and recording
mechanism.
• Threat intelligence generation.
• Threat intelligence feeds generation.
• Honeypots deployment.

4. Continue…
• Modifying open source honey pots to add
more attack vectors.
• Web application where user can download:
– Threat intelligence reports,
– View malicious activity of specific IP address.
– Visual aid like graphs, charts and map will also be
provided.

5. Modules
• Attacks
• Security intelligence Generation
• Feeds Generation
• Feeds collection
• Honeypot

6. Block Diagram

7. Deployment Diagram

8. System Use case Diagram

9. System Architecture

10. Component Diagram

11. USER ACTIVITY DIAGRAM

13. HONEYPOT SQL INJECTION
ACTIVITY

14. Check for sql
injection
vulnerability
save sql injection in
database
emulate sqlinjection

15. Level 0 Data Flow Diagrams

16. Level 1 Data Flow Diagrams

19. References
• References
• Roger S. Pressman. Software Engineering: A Practioner's
Approach (Sixth Edition, International Edition). McGraw-Hill,
2005.
• Ian Sommerville. Software Engineering (Ninth Edition).
Addison-Wesley, 2012
• Hans van Vliet. Software Engineering: Principles and
Practice (fourth Edition). Wiley, 2006
• RFC: 793 TRANSMISSION CONTROL PROTOCOL DARPA
INTERNET PROGRAM PROTOCOL SPECIFICATIONS September
1981.
• Honeypot-based Forensics F. Pouget, M. Dacier

20. DEMONSTRATION