Ensnare is packaged as a gem plugin for Ruby on Rails and was developed to allow configuring and deploying a basic malicious behavior detection and response scheme in less than ten minutes.
Already heard about the tool and want to try it out? Do it!
Add the gem to your project's Gemfile:
gem 'ensnare', :git => 'email@example.com:ahoernecke/Ensnare.git'
Install the gem:
Run the migrations for Ensnare:
rake ensnare:install:migrations rake db:migrate
Enable parameter tampering for your application by changing the mass_assignment_sanitizer:
Set config.active_record.mass_assignment_sanitizer to logger:
config.active_record.mass_assignment_sanitizer = :logger
Enable Ensnare in your application_controller.rb file:
Append the following filter below protect_from_forgery in your application_controller.rb file:
Add the following to the end of your routes.rb file:
mount Ensnare::Engine => "/ensnare", :as => "ensnare_engine" match "*_", :to => "ensnare::violations#routing_error"
Create an Ensnare config file:
rails g ensnare:install
Take a look at the example ensnare.rb file:
After you start your application, take a look at the dashboard:
In order to access the dashboard, this step needs to be performed.
To prevent unnecessary users from accessing the dashboard, add the following to the
config.dashboard_user_method = :current_user config.dashboard_authorization_method = :admin?
NOTE: you need to have a method defined to check if the user is the admin.
http://books.google.com/books?id=flC9dFFLWIsC&pg=PT111&lpg=PT111&dq=honey+trap+mod+security&source=bl&ots=zKxJvehMpA&sig=E9qKn7L4siEk01caEF6wqofbbm8&hl=en&sa=X&ei=_iRUUoCRJKPiiwK8y4HIBA&ved=0CFUQ6AEwBg#v=onepage&q=honey trap mod security&f=false
Feel free to reach out to us if you have questions or want to contribute to the project!