Nova is a software application for preventing and detecting hostile network reconnaissance (such as nmap scans). It does this by first creating the Haystack: a large collection of low interaction honeypots using an updated version of Honeyd. Finding real machines on the network becomes like finding a needle in a haystack of fake machines. Second, Nova uses machine learning algorithms to automatically detect and classify attempts at hostile reconnaissance, so there's no need to go searching manually through your honeypot's log files. It provides an easy to use Web-based interface powered by Node.js to configure itself and Honeyd instances.
| Tags | Network Analysis Monitoring IDS Security Information Security honeypot Administration |
|---|---|
| Licenses | GPLv3 |
| Operating Systems | Linux (32 and 64 bit) |
| Implementation | C++ Node.js |
Recent releases


Release Notes: Increased Web UI compatibility with IE. Simplified port sets. Improved responsiveness of the suspect grid. Adds better rsyslog and email alert support. Salt hashes of login credentials. Miscellaneous UI improvements.


Release Notes: A significantly streamlined and improved Quasar UI.


Release Notes: Many bugfixes, and stability and UI improvements. This is the first release marked as stable.