HK HoneyNet

The HK Honeynet addresses the lack of shared, real-time early threat data and the absence of an HK-based early warning system for proactive cyber defence. It counters challenges like individual, proprietary threat hunting by centralising intelligence on attacks, malware samples, and attacker behaviours.

• Decentralised Pre-processing & Edge Computing: The HK Honeynet employs decentralised pre-processing and feature extraction at honeypot edge servers.
• Automated Actionable Threat Intelligence: The platform automatically extracts actionable threat intelligence, such as bad source IPs and malware samples, directly from captured data.
• Hong Kong Cyber Attack Leading Indexes (HKCALI): This innovative output generates Hong Kong Cyber Attack Leading Indexes (HKCALI) by sector.

• Enhanced Proactive Cyber Defence: The HK Honeynet fosters Hong Kong's cyber attack protection by providing early warning and threat prediction.
• Discovery of Zero-Day Threats: The platform facilitates the discovery of zero-day threats and previously unknown malware.
• Centralised and Scalable Threat Intelligence: It establishes Hong Kong's first Honeynet community, offering a macro view of cyber-attacks by sector.
• Fostering Cybersecurity Research and Talent Development: The HK Honeynet provides continuous, real-time threat data to universities and R&D institutes. This valuable dataset enables academic research into new cyber-attack patterns and defence mechanisms.

• Hong Kong Information and Communications Technology (ICT) Awards 2023 - Silver Award
• Geneva International Inventions Award 2023 – Gold Medal
• Business GoVirtual 2023 – Excellence Award
• Institute of Financial Technology of Asia (IFTA) FinTech & Innovation Awards 2023 - Platinum
• Communications Association of HK (CAHK) STAR Award 2023 - Silver Award
• APEC INPUT2 Awards 2023 － Finalist award

• Proactive Cyber Defence: It provides Hong Kong with an early threat warning system and predictive insights through HK Cyber Attack Leading Indexes (HKCALI).
• Zero-Day Threat Discovery: The platform captures real-time attack information, including live threat traffic and previously unknown malware samples.
• Actionable Intelligence for Response: It automatically extracts actionable intelligence, such as bad source IPs and malware samples.

• US20240364731A1