Minerva Honeypot Detection

Example Use Cases

• 1

  Autonomously detect honeypot hosts in network scans.

• 2

  Analyze TCP timing data to distinguish real services from emulated honeypots.

• 3

  A stateless, embeddable honeypot detection tool accessible via MCP or HTTP API.

Description

Minerva-HDN analyzes round-trip time measurements of TCP connections to identify honeypot systems by detecting statistical anomalies in timing patterns. It provides verdicts, probability scores, and detailed indicators of honeypot behavior, supporting CLI, HTTP API, and MCP server interfaces. This stateless tool integrates easily into autonomous defense platforms and network scanning workflows without infrastructure dependencies.