The SISSDEN project has deployed an innovative, robust, large scale distributed sensor network composed of beyond state-of-the-art virtualized honeypots that analyse traffic tunnelled from network endpoints hosted in many international locations. The collected data helps enhance situational awareness via free daily remediation reports for network owners, National CERTs and other government institutions, as well as SMEs and private citizens. The threat intelligence provided constitutes one of the largest, richest, most timely and accurate data sources for identifying malware threats and malicious behaviour based on end-user exposure.
A curated reference dataset produced as a part of the project provides a unique resource for further research in order to drive forward the global understanding of cyber threats with no-cost for all the stakeholders, vetted security researchers and cybercrime fighters.
Large scale Internet attack data collection, analysis and sharing by the SISSDEN project generates positive societal impacts primarily in four main areas:
1. National CERTs and other large national institutions.
2. Law Enforcement Agencies.
3. Service Providers, Enterprises, SMEs and Individual Citizens.
4. Vetted Security Researchers and Research Institutions.
The sensor network exceeded original assumptions, growing to over 250 sensors spread around the globe. Daily remediation reports supply a constant stream of actionable threat information to thousands of recipients worldwide. The National CERT recipient user base exceeded 100 National CERTs worldwide, including all EU member states. The number of direct recipients is now over 4100, exceeding the planned target audience.
Novel analytical tools and methods provide valuable insights into malware behaviour and network attacks, enabling advanced tracking of botnet activity and effective identification of new threats.
