Honeypots mailing list archives

IPD, IDS and honeypots


From: José Vicente Tomé Vecchione <josevtome () gmail com>
Date: Tue, 30 Aug 2005 01:36:18 -0400

Hi.
 
I'm making an investigation about honeypots and I am researching about IDS
and IPS. Can anyone help me to identify the differences between IPS and IDS
and how an IPS could improve a honeypot implementation? I have a homemade
honeypot implemented over a virtual machine running under ubuntu linux.
Could I use the interface of the real system as the "firewall - IDS" part of
the IPS and route the filtered packages to the virtual machine's nic?
 
Thanks!
 

        
   José Vicente Tomé Vecchione  
   josevtome () gmail com       

 


Current thread: