OWASP AppSec Research 2013

A huge barrier in web security research is the availability of research data. Web traffic data is too sensitive to be shared among the community to allow researchers for developing new methodologies, testing existing approaches or comparing to each other.


The WebSensor project aims at providing a web honeypot that collects data in the format of the ModSecurity audit log. This allows the use of tools like the jwall-tools to replay the recorded HTTP traffic and extract statistics that are valuable for other OWASP projects, like the OWASP ModSecurity Core Rules project.


Community Oriented
------------------------------
The main idea of the WebSensor project to spawn a community for data collection and data sharing. That is, each participant can run one or more sensors and the data will be collected in a central system. The collected data is then accessible to any participant of the project.

http://www.jwall.org/websensor/