HoneyField: Attack Analytics
Attack Analytics: Actionable Security Analytics Built in to Your Application
Make decisions about security based on real data gathered from your application. Instrument your application with easy to use libraries.
How does it work?
HoneyField is made up of two major parts:
- A front end application that makes it easy to see and understand security event data with charts and graphs.
- An API / Service, with easy to use client libraries that can be used to detect and report security events on a field by field basis within an application.
What's in a name?
The name HoneyField combines the concept of a honeypot with the concept of a form field. A honeypot is a tool used in security to identify attack patterns by appearing to be a target and recording the attacker's activity. Using this system, we do not detect or trip up an attacker at a port level, nor even at a request level, but at a field level.
Step up
Jemurai provides a number of security services, including pure manual security code review, security architecture review, application scanning and testing and can engage with organizations to develop security programs and build security into their SDLC.
Who should be interested?
Organizations with questions about what is happening to their applications online.
HoneyField is a product developed for the purpose of making metrics about security events easily visible to software developers. Just as google analytics provides developers and organizations as a whole with information about how users are interacting with their website, HoneyField shows them what security events are taking place within their application. This knowledge arms the developer and the organization as a whole with valuable information that can be used to guide further decisions and investment in security.
What does it cost?
Costs are based on the number of requests or events analyzed. Contact us to find out what it would take to get attack analytics for your application!
Jemurai is also open to discussions to license the server software for internal use.