Honeypot Article.

["Gonzalez, Albert" <albert.gonzalez () eds com>]

The author of the paper states that he hasn't found any articles describing
or analyzing an incident. The first paper 
to ever come out of the honeynet project(or one of their papers) describes a
analysis of an attack on one of their honeypots.
A quick search on google came up with quite a few papers analyzing attacks.
I personally enjoyed the OpenBSD papers by the
Lucidic Honeypot Project[1] and Chris Reining[2]. 
 
[1] - http://www.lucidic.net/whitepapers/manuzis-7-5-2002-1.html
[2] - http://blow.packetfu.org:1337/hnd.html
 
 
These views are strickly mine, and not that of my employer. 
 
Alberto Gonzalez 
EDS - Global Security Operations Center 
Security and Privacy Professional Services