How does HoneyC differ from Honeyclient?
Honeyclient does crawl the web with a real browser (Internet Explorer) and performs the analysis for exploit based on the state of the OS. As such, it is classified as a high interaction client honeypot. HoneyC, on the other hand, uses emulated clients (e.g. wget to emulate Internet Explorer) and uses an analysis engine that might make use of an algorithm other than OS state inspection (e.g. signature matching). As such, HoneyC is classified as a low interaction client honeypot. Further, HoneyC is a low interaction client honeypot framework, which allows to plug in different visitor clients, queuer and analysis engine algorithms.
