Honeypots: Simple, Cost-Effective Detection

["H. Morrow Long" <morrow.long () YALE EDU>]

Lance Spitzner article on how 'honeypots' can be effective tools
in the information security kit for protecting production nets
(as opposed to just research experiments for collecting data):

       http://www.securityfocus.com/infocus/1690

Morrow


-------- Original Message --------
Subject: SECUR> Honeypots: Simple, Cost-Effective Detection
Date: Thu, 01 May 2003 09:35:07 -0400
From: gleason <gleason () edu-cyberpg com>
Reply-To: gleason () edu-cyberpg com
To: nethappenings () freelists org

**************************************************************
Net Happenings - From Educational CyberPlayGround
**************************************************************


Honeypots: Simple, Cost-Effective Detection
http://www.securityfocus.com/infocus/1690
by Lance Spitzner, www.tracking-hackers.com

This is the fourth article in an ongoing series examining honeypots.
In previous installments, we have covered two different honeypot
solutions: Honeyd and Specter. Both honeypots are low-interaction
production solutions; their purpose is to help protect organizations,
as opposed to research honeypots, which are used to gather
information. Production honeypots work by emulating a variety of
services and operating systems. Honeyd, an OpenSource solution, is
considered more powerful and flexible than Specter, but it is also
more difficult to use. Specter, a commercially supported solution, is
easier to use as it runs on Windows. In this paper we take a step back
for a moment and discuss the value of honeypot technologies in
general. Why would you want to deploy production honeypots in your
organization? How can a honeypot help security professionals to do
their job more effectively?



EDUCATIONAL CYBERPLAYGROUND
<http://www.edu-cyberpg.com>
+-----------------------------------------------------------------------+
|   FREE EDUCATION VENDOR DIRECTORY LISTING
|

|   PREMIUM EDUCATON VENDOR DIRECTORY LISTING
|
|   FEATURED MERCHANT VENDOR DIRECTORY LISTING
|   http://www.edu-cyberpg.com/Directory/default.asp
+-----------------------------------------------------------------------+

<>~~~~~<>~~~~~<>~~~~~<>~~~~~<>~~~~~<>~~~~~<>~~~~~<>~~~~~<>~~~~~<>
EDUCATIONAL CYBERPLAYGROUND
http://www.edu-cyberpg.com
<>~~~~~<>~~~~~<>~~~~~<>~~~~~<>

ADVERTISE REACH THE EDUCATION MARKET

GET FREE EDUCATION VENDOR DIRECTORY LISTING
http://www.edu-cyberpg.com/Directory/default.asp

Net Happenings,K12 Newsletters, Network Newsletters, New-list
http://www.edu-cyberpg.com/Community/index.html

HOT LIST OF SCHOOLS ONLINE
http://www.edu-cyberpg.com/Schools/default.asp

SERVICES
http://www.edu-cyberpg.com/PS/Home_Products.html
<>~~~~~<>~~~~~<>~~~~~<>~~~~~<>~~~~~<>~~~~~<>~~~~~<>~~~~~<>~~~~~<>

**********
Participation and subscription information for this EDUCAUSE Discussion Group discussion list can be found at 
http://www.educause.edu/memdir/cg/.