The Honeynet Project
SecurityHoneypots and Threat Intelligence R&D
Get involved
Links from the organization’s published listing (2026). Older contact links may have moved.
Proposal examples
Browse the proposal library →Outcomes are reported by the linked archives.
- 2024 · acceptedImprove-websockets-and-TCP-in-mitmproxy Gaurav-J ↗
Programs & participation
17 records across 1 programIndexed project records; missing years are not zero. Coverage
2026Google Summer of CodeAnnual program · 8 projects indexed
- Expanding Artemis Coverage with Improved Discovery and Vulnerability Detection
- GreedyBear Injection Event Collector API
- Greedybear: Access payload files
- GreedyBear: Dashboard Modularization
- Hardening EventHorizon with OpenTelemetry and Bio Inspired Deception Across IoT Protocol Tarpits
- Improving the DICOMHawk Medical Honeypot: Profile-Driven Deception with Fingerprinting & Sandbox
- IntelOwl: Integrating a Self-Deployed LLM Chatbot for Threat Intelligence
- IntelOwl: Integration Ecosystem & Connector Optimization
Source checked Sep 28, 2026
Participation imported from the GSoC Organizations archive snapshot; this historical listing is not an application-status claim.
2025Google Summer of CodeAnnual program · 9 projects indexed
- Alerting Module Enhancement: Standardization, Customization, and Improvements
- BuffaLogs: Developing BuffaCLI for Command-Line Management and BuffaWatch for Real-Time Log Tracking
- Extending the Artemis scanner
- Glutton : Refactoring protocol parsers originally written in Go into Spicy
- Implementing Protocol Parsers for Glutton Using Spicy
- Improving the DICOMHawk medical honeypot
- Improving the SweetCam IP camera honeypot
- IntelOwl Improvements: Analyzers and Integrations
- IntelOwl improvements: refactor analyzer tests
Source checked Sep 28, 2026
Participation imported from the GSoC Organizations archive snapshot; this historical listing is not an application-status claim.
2024Google Summer of CodeAnnual program · 9 projects indexed
- Extending The Artemis Scanner
- Extending the DRAKVUF Sandbox analytic pipeline
- Improve features for DNS and HTTP3 in mitmproxy
- Improve the onboarding experience on mitmweb
- Improving the functionality of Honeyscanner: a honeypot vulnerability analyzer
- Improving the Functionality of Honeyscanner: A Honeypot Vulnerability Analyzer.
- ML-based web attack classification project for TANNER
- New Analyzers for IntelOwl
- Proposal for New Documentation Site for IntelOwl and friends
Source checked Sep 28, 2026
Participation imported from the GSoC Organizations archive snapshot; this historical listing is not an application-status claim.
2023Google Summer of CodeAnnual program · 6 projects indexed
- Frontend Improvements for BuffaLogs, Intelowl.
- Honeyscanner: a vulnerability analysis tool for honeypots
- Import / Export of HAR files addition to mitmproxy
- mitmproxy - transparent mode on Linux and OSx in Rust
- Ochi usability improvements
- Riotpot: improving the IoT/OT honeypot
Source checked Sep 28, 2026
Participation imported from the GSoC Organizations archive snapshot; this historical listing is not an application-status claim.
2022Google Summer of CodeAnnual program · 6 projects indexed
- Bridge Qiling with other static analysis software
- Creating Playbooks for IntelOwl
- Intelowl Go Client
- IntelOwl v4 improvements
- QUIC Support in mitmproxy
- RIoTPot: A Shapeshifting honeypot
Source checked Sep 28, 2026
Participation imported from the GSoC Organizations archive snapshot; this historical listing is not an application-status claim.
2021Google Summer of CodeAnnual program · 11 projects indexed
- A Stitch In Time (saves nine)
- Cloning and compatibility improvements for Snare
- Extending DRAKVUF by an I/O-emulation module in order to camouflage its sandbox nature
- Implementing Linux support in Drakvuf-Sandbox
- IntelOwl Connectors Manager and Integrations
- IntelOwl Improvements
- Make mitmweb’s UI rich and easy to use
- New Rule Generation Technique & Make Quark Everywhere Among Security Open Source Projects
- PcapMonkey Improvements
- Replacing the core library of Quark-Engine
- RIoTPot - Honeypot for IOT/OT devices
Source checked Sep 28, 2026
Participation imported from the GSoC Organizations archive snapshot; this historical listing is not an application-status claim.
2020Google Summer of CodeAnnual program · 11 projects indexed
- Analytical malware classification
- Enhance detection capabilities: Improve the MITRE ATT&CK coverage in Monkey by adding post-breach actions
- Expanding Clang-Tidy to include AUTOSAR compliance
- HosTaGe: a mobile honeypot
- Improve cloning & serving functionality for Snare
- Improving the usability of mitmproxy with new features
- libmicrovmi – full bindings to Xen and KVM
- LibVMI as a Unikraft Application
- New Web Interface for IntelOwl & Adding New Analyzers
- Svmidbg: developing a Stealthy Hypervisor based VM Introspection Debugger
- Tenjint Orchestration framework
Source checked Sep 28, 2026
Participation imported from the GSoC Organizations archive snapshot; this historical listing is not an application-status claim.
2019Google Summer of CodeAnnual program · 9 projects indexed
- Adding (Updating) macOS support to Cuckoo SandBox
- Adding Privilege escalation functionality to the monkey
- Heralding: RDP and VNC implementation
- Implementing behavioral analysis for Android
- Injecting function-calls to Linux through a hypervisor
- Operating System Fuzzing With a Hypervisor: OSFuzz
- Operating-system fuzzing with a hypervisor
- SNARE/TANNER: Improvements
- SSH Proxy for Cowrie
Source checked Sep 28, 2026
Participation imported from the GSoC Organizations archive snapshot; this historical listing is not an application-status claim.
2018Google Summer of CodeAnnual program · 17 projects indexed
- #15 - CONPOT: Protocols Wave #2
- #9 - DRAKVUF: Support for Dynamic Malware Analysis on ARM
- Automated Malware Relationship Mining
- DRAKVUF - Stealthiness Improvement
- DRAKVUF : Process Injector Enhancement
- Droidbot with AI
- Google Protocol Buffers Serialization
- Honeypot Detection Tool
- Implementing Yara rules in Honeytrap
- LibVMI extensions: Bareflank hypervisor support
- Mitmproxy improvements
- New exploiters in Infection Monkey
- Port LibVMI to Xen MiniOS
- Semi-automated DroidBot: Semi-automated Android UI testing
- SNARE/TANNER
- Thug: Python 3 Port and PyV8 Replacement
- Trusted Execution Environment Based Dynamic Analysis on ARM
Source checked Sep 28, 2026
Participation imported from the GSoC Organizations archive snapshot; this historical listing is not an application-status claim.
2017Google Summer of CodeAnnual program · 12 projects indexed
- Android Sandbox Detection and Countermeasure Proposal
- Automated Malware Relationships Detection Tool
- Building examples services for Holmes processing
- Conpot improvements
- Glutton Enhancement
- Holmes Framework to Automate Advanced Analytics
- Long term analysis
- Mitmproxy Core
- Mitmweb Improve
- Proposal to the Honeynet Project.
- Protocol and adversary identification in Go
- SNARE/TANNER
Source checked Sep 28, 2026
Participation imported from the GSoC Organizations archive snapshot; this historical listing is not an application-status claim.
2016Google Summer of CodeAnnual program · 11 projects indexed
- [MITMProxy] Clemens Brunner
- Centralized Service Configuration for Holmes
- Context based fuzzy clustering of malware
- Foundations for DRAKVUF on ARM
- Improving mitmproxy
- Improving the coverage of DroidBot
- Integrate DroidBOT into Cuckoo Sandbox
- Rumal Dennis Parchkov
- Vulnerability emulation for SNARE and TANNER
- Web Interface and Generic API Development for Holmes Processing
- YAPDNS
Source checked Sep 28, 2026
Participation imported from the GSoC Organizations archive snapshot; this historical listing is not an application-status claim.
2015Google Summer of CodeAnnual program · 7 projects indexed
- Adding a scoring system in peepdf
- BeDroid - ART runtime intrumentation framework
- Cuckoo Sandbox Idea #2: Support for Mac OS binaries
- dpkt 2.0: Python Packet Creation and Parsing Library
- mitmproxy: WebSocket and HTTP/2 support
- Online Android Sandbox with Automatic App Testing
- Project Rumal
Source checked Oct 2, 2026
Community mirror of the 2009–2015 Google Melange project archive. Original Melange project links may now redirect; the participation source retains the mirrored records. Organizations without indexed projects may be absent. Imported and normalized from Vaibhav Gupta / GSoC-Data-Analyser, MIT.
2013Google Summer of CodeAnnual program · 13 projects indexed
- "Project 11: HpfeedsHoneyGraph for visualizing malicious intention" Proposal by Vincent Kao
- AfterGlow Cloud Project
- Extending Beeswarm
- HoneyProxy
- Improvements for project IMALSE
- Integration of Pwnypot into Cuckoo
- IPv6 attack detector
- Network Analyzer
- Platform independent binary-focused debugger frontend
- Proposal for SHIVA: Spam Honeypot with Intelligent Virtual Analyzer
- Scriptable debugger stub based on binary instrumentation
- Standard Variable and Type Inference Lib
- Thug Distributed Task Queuing
Source checked Oct 2, 2026
Community mirror of the 2009–2015 Google Melange project archive. Original Melange project links may now redirect; the participation source retains the mirrored records. Organizations without indexed projects may be absent. Imported and normalized from Vaibhav Gupta / GSoC-Data-Analyser, MIT.
2012Google Summer of CodeAnnual program · 15 projects indexed
- AfterGlow Cloud
- Automated Attack Community Graph Construction
- Automated Attack Community Graph Construction
- Data mining module, finding frequent network-itemsets
- Expand Cuckoo Sandbox
- Further extend Capture-HPC with possibility of detecting malicious behavior on Linux Machines
- Glastopf improvements
- HonEeeBox User Interface
- HoneyProxy - HTTP(S) Traffic Investigation
- Improve our Android application sandbox (DroidBox)
- Improving APKInspektor
- IPv6 attack detector
- Network Analyzer
- network malware simulation
- Project 6 - IPv6 attack detector
Source checked Oct 2, 2026
Community mirror of the 2009–2015 Google Melange project archive. Original Melange project links may now redirect; the participation source retains the mirrored records. Organizations without indexed projects may be absent. Imported and normalized from Vaibhav Gupta / GSoC-Data-Analyser, MIT.
2011Google Summer of CodeAnnual program · 12 projects indexed
- An Android Application Sandbox for Dynamic Analysis
- Cuckoobox
- Extending Wireshark Analysis
- Honeynet Visualization (Project #3)
- Hypervisor data collection
- Improving shellcode emulation performance
- Network Sinkhole
- Project 1 - Improve our high interaction client honeypot Capture-HPC
- Project 16 - VoIP low interaction server honeypots
- Project 2 - HonEeeBox Data Management Interface
- Static Analysis of Android Malware
- Web based visualization for malware/attack analysis
Source checked Oct 2, 2026
Community mirror of the 2009–2015 Google Melange project archive. Original Melange project links may now redirect; the participation source retains the mirrored records. Organizations without indexed projects may be absent. Imported and normalized from Vaibhav Gupta / GSoC-Data-Analyser, MIT.
2010Google Summer of CodeAnnual program · 16 projects indexed
- Application for Project 15 - "A uniform sandbox/sandnet with data collection capabilities"
- Developing an Instant Messenger Honeypot
- Dionaea Features Improvement
- GSoC-Honeynet 2010 Project Proposal (TraceXploit) - Koh Yong Chuan
- Hale - A botnet command and control monitor
- Implement TraceExploit: Replay the collected network trace to perform successful exploit
- Improve high interaction honeypot capabilities.
- Improving PHoneyC----Detecting and Analyzing Malicious PDF attack
- Log Anonymization Library
- Log File Anonymization
- My proposal for infected host detection through DNS analysis
- PHP/RFI Sandbox
- Project 1 - Improve our low interaction client honeypot PHoneyC
- Project 13 - Infected host detection through DNS analysis
- Using hardware virtualization to improve high interaction honeypot data capture system
- VoIP (SIP) Honeypot Implementation in Dionaea
Source checked Oct 2, 2026
Community mirror of the 2009–2015 Google Melange project archive. Original Melange project links may now redirect; the participation source retains the mirrored records. Organizations without indexed projects may be absent. Imported and normalized from Vaibhav Gupta / GSoC-Data-Analyser, MIT.
2009Google Summer of CodeAnnual program · 9 projects indexed
- Developing a Hybrid Honeypot Architecture
- Developing and improving a Web Application Honeypot
- Further DOM Simulation and other Improvements to PHoneyC
- Google summer code application - Honeynet Project
- Improving high interaction client honeypots (Capture-HPC and Capture-BAT)
- Improving Picviz to dynamic and visual log data analysis
- Proposal for Project 1: Improving phoneyc
- Qebek: QEMU based Sebek
- Sebek Time Series Visualization
Source checked Oct 2, 2026
Community mirror of the 2009–2015 Google Melange project archive. Original Melange project links may now redirect; the participation source retains the mirrored records. Organizations without indexed projects may be absent. Imported and normalized from Vaibhav Gupta / GSoC-Data-Analyser, MIT.