Re: Complete Honeynet

[Valdis.Kletnieks () vt edu]

On Sat, 25 Jan 2003 20:19:54 +0100, zeal0t () gmx net  said:
> My company wanna try some Honeynet solutions and I'm learning by this
> company (apprentiship).
> I told them I wanna try to make this project and now I have a question.
>
> For what I must look when I wanna realise a Honeynet.

Step 1: Decide why you want a honeypot rather than an intrusion detection
system (IDS).  What do you want the honeypot to do for you that an IDS won't?

The answer to this question will greatly determine what your setup will
look like.  For instance, if you're trying to learn about Windows hackers,
a RedHat-based honeypot probably won't do it for you, unless you go to GREAT
lengths to fool the attackers.  Similarly, what hardening you do will
depend on what you're trying to catch, and why....
-- 
                                Valdis Kletnieks
                                Computer Systems Senior Engineer
                                Virginia Tech

Attachment: _bin
Description: