Re: Moving forward with defintion of honeypots

[David Goldsmith <dgoldsmith () sans org>]

On Monday 19 May 2003 23:23, Lance Spitzner wrote:

I would say that option A is best.  The 'honeypot', whether it is one 
real or virtual system, or a network of systems, is the resource that 
is made available to be probed, attacked and/or compromised.

It is NOT necessarily the component that does the monitoring of 
traffic or that provides control over traffic to/from the honeypot.

David Goldsmith

> OPTION A
> --------
>   "A honeypot is an information system resource who's
>    value lies in being probed, attacked, or compromised"
>
>
> OPTION B
> --------
>   "A honeypot is an information system resource who's
>    value lies in monitoring unauthorized or illicit use of
>    that resource"