[GSOC2019 Final Report] PiPot

PiPot_GSOC2019.md

GSOC 2019 Final Report

Student	Bowen Chen
Github	VertexC
Organization	CCExtractor
Mentor	Willem Van Iseghem
Project	PiPot

Project Description

PiPot is a honeypot server which pretends as a potential target for attackers from network and collect the attack data. It also has the ability to deploy more instances to make it harder to get information from the real one. The goal of this GSOC project is to improve the functionality and scalability of the current PiPot.

Completed work(PR)

1. Server Development(Every new feature is covered with unit test)

• a. Create and run server inside python virtualenv
  • set up virtualenv for server
• b. Run PiPot on non-Arm platform like RPi
  • allow user specific network interface
  • suppot image deployment on non-Arm platform
• c. Allow container-based service uploading
  • container based service upload
• d. Allow dynamic data report update
  • dynamic report update
• e. Allow service version update
  • fix service cannot upload properly
  • add service manager interface, upgrade from old to newer models from updated service
  • add test on invalid test update

2. Continuous Integration

• travis setup, add test database setup and with some basic tests
• notification management test
• add codecov
• start sql service explicity on travis

3. python2 to python3 migration

• update enum attribute for sqlalchemy table
• fix enum attribute iteration issue due to python3 update

Future work

1. have container based notification uploading, ideally check the requirement before actually applied to pip install
2. develop tests to improve the test coverage
3. update the image deployment to support the latest Raspberry Pi model
4. set up a mailing notification service to report the collected data
5. password change/get back user name using mail verification