Honeypots mailing list archives
Re: question
From: Sam Varughese <sam.varughese () paladion net>
Date: Thu, 21 Aug 2003 19:21:31 +0530
On Thu, 21 Aug 2003 07:07:36 EDT Motayyam79 () aol com wrote:
Hi, Just one question. Can honeypots be deployed internally in order to monitor for insider attacks?if so how?
Some idea about how ur setup is done could be helpful in answering this question. In general the GenII honeynet setup is good idea. http://www.sfhn.org/whites/gen2.html This is cool paper. The idea is that your internal people would access the servers in question through a Bridge mode iptables box along with the normal honeypot setup for monitoring etc. Regards Sam V Security Consultant Paladion Networks
Thanks
Current thread:
- Question Motayyam79 (Aug 18)
- Re: Question Richard Stevens (Aug 18)
- Re: Question Lance Spitzner (Aug 18)
- Re: Question Tom Wright (Aug 19)
- RE: Question Faiz Ahmad Shuja (Aug 18)
- <Possible follow-ups>
- question Motayyam79 (Aug 21)
- Re: question Sam Varughese (Aug 21)
- RE: question Faiz Ahmad Shuja (Aug 21)
- RE: question Sergey V. Gordeychik (Aug 21)
- question Motayyam79 (Sep 01)
- Re: question Valdis . Kletnieks (Sep 01)
- RE: question Nick Duda (Sep 01)