Honeypots mailing list archives
RE: profiling honeypots..
From: "Toby Miller" <toby_miller () adelphia net>
Date: Mon, 7 Apr 2003 15:13:25 -0400
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 I agree. I think a honeypot is only as good as where it is located, if you are running a honeypot on a cable modem then I think you will catch script kiddies 99% of the time. However, if your honeypot is place deep inside a corporate network or a government network then you might catch a more advanced hacker. Toby Folks, I believe that FBI actual profiling is not honeypot based. FBI uses network monitoring software such as "Carnivore" in the network (In Europe existis Echelon). Honeypots does not tracking criminals and terrorists :-). Honeypots are useful to trap script kiddies mainly. These are not so dangerous... What do you think? regards, Marcelo. -----BEGIN PGP SIGNATURE----- Version: PGPfreeware 6.5.8 for non-commercial use <http://www.pgp.com> iQA/AwUBPpHNy1LhpjRJgUE5EQJHLgCg66h0VaVviYfEVRwFaH90ihJ1CZgAnReq hIO0z+lZ+tcoASHbl3Gob7Yb =FlH8 -----END PGP SIGNATURE-----
Current thread:
- Re: profiling honeypots.., (continued)
- Re: profiling honeypots.. Anton A. Chuvakin (Apr 07)
- Re: profiling honeypots.. Bernie, CTA (Apr 07)
- RE: profiling honeypots.. Toby Miller (Apr 07)
- RE: profiling honeypots.. Nigel Clarke (Apr 07)
- RE: profiling honeypots.. Toby Miller (Apr 07)
- RE: profiling honeypots.. Nigel Clarke (Apr 07)
- Re: profiling honeypots.. Anton A. Chuvakin (Apr 07)
- RE: profiling honeypots.. Bernie, CTA (Apr 07)
- Re: profiling honeypots.. paul (Apr 07)
- Re: profiling honeypots.. Seth Arnold (Apr 07)