A 'honeypot' is designed to detect server-side attacks. In contrast, a 'honeyclient' is designed to detect client-side attacks. Specifically, a honeyclient is a dedicated host that drives specially instrumented applications to access remote servers to see if those servers are behaving in a malicious manner (by compromising the client). Honeyclients can proactively detect exploits against client applications without known signatures. This framework uses a client-server model with SOAP messaging as the primary communication method, and uses the free version of VMware Server as a means of virtualizing the client environment. License: GNU General Public License v2 Changes: Real-time integrity checking (via a modified version of Capture-HPC). Drone database / Web service support: a Ruby on Rails application to keep track of malware and centralize URL processing across different honeyclients. Improved stability. Improved firewall support. Complex pages (including external IFRAMES) now render completely within the honeyclient.

	Read more at FreshMeat
	www.pheedo.com/click.phdo?i=ac947e9eb977b3426f08b93ecccb29db