Some new and interesting work building on an in-kernel module for high interaction honeypots: http://arxiv.org/pdf/1507.03117v1.pdf