Skip to content

Implement automated deployment of Cowrie SSH honeypot using Terraform and Ansible #4

@hariram4862

Description

@hariram4862

Implement Automated Cowrie SSH Honeypot Deployment

Problem

The Honeynet project aims to build a scalable framework for deploying honeypots across cloud environments. Currently, the repository lacks a functional implementation for provisioning and configuring honeypot nodes.

Without automation, deploying honeypots requires manual infrastructure setup and configuration, which makes scaling across multiple regions
or cloud providers difficult.

Feature to Implement

Introduce an automated deployment pipeline capable of:

• Provisioning cloud infrastructure for honeypot nodes
• Installing and configuring a Cowrie SSH honeypot
• Automating the deployment workflow using infrastructure-as-code

This will be implemented using:

  • Terraform for infrastructure provisioning
  • Ansible for honeypot configuration
  • Cowrie as the SSH honeypot

Expected Outcome

A reproducible deployment workflow that allows developers to deploy a functional honeypot node using a single command.

Example workflow:

                +-------------------------+
                |        Developer        |
                |  runs deploy_honeypots  |
                +-----------+-------------+
                            |
                            v
                +-----------+-------------+
                |        Terraform        |
                |  Infrastructure as Code |
                +-----------+-------------+
                            |
                            v
                +-----------+-------------+
                |        Cloud VM         |
                |   (AWS EC2 Instance)   |
                +-----------+-------------+
                            |
                            v
                +-----------+-------------+
                |          Ansible        |
                |  Configuration Manager  |
                +-----------+-------------+
                            |
                            v
                +-----------+-------------+
                |     Cowrie Honeypot     |
                |    SSH Attack Capture   |
                +-----------+-------------+
                            |
                            v
                +-----------+-------------+
                |   Logged Attacker Data  |
                |  Commands & Sessions    |
                +-------------------------+

This implementation will serve as the first operational component of the Honeynet deployment framework and provide a foundation for future features such as multi-region honeynet deployments and centralized attack monitoring.

Metadata

Metadata

Assignees

No one assigned

    Labels

    No labels
    No labels

    Type

    No type

    Projects

    No projects

    Milestone

    No milestone

    Relationships

    None yet

    Development

    No branches or pull requests

    Issue actions