Honeypots mailing list archives

RE: Honeypot Definition - Almost There!


From: "Eric D. Williams" <eric () infobro com>
Date: Fri, 23 May 2003 21:15:32 -0400

On Friday, May 23, 2003 8:05 PM, Valdis.Kletnieks () vt edu 
[SMTP:Valdis.Kletnieks () vt edu] wrote:
8<...>8

vk> Slight logical whoops here - the *TOOL* is being used (hopefully) in an
vk> authorized manner.  The *TOOL* is collecting information on somebody else's
vk> unauthorized use of something.  Compare this to a law enforcement wiretap,
vk> where the value is an authorized collection of information on the bad guy's
vk> discussions of something illegal.....

vk> Unless of course the black hats are using the honeypot itself to gather 
data
vk> on you.. ;)

It may not be a logical lapse.  It could be a semantic artifact from the 
application of the definition.  I do favor "information system resource" 
however so that term is probably more 'workable' given the constraint on 
application you cite e.g. using 'it' as a sanctioned resource inside your own 
enclave to ... "it's misdirected, unauthorized or illicit use."

-e



Current thread: