Honeypots mailing list archives
tiered or tuned honeynets
From: Max Kilger <MaxK () symresources com>
Date: Tue, 1 Jul 2003 14:07:12 -0400
Someone mentioned trying to find out more about the concept of tiered or tuned honeynets. Since I'm the one who coined the term "tuned honeynet" I'll try to elucidate just a bit. Tradionally when people have discussed creating honeynets with substantive content they have focused on one particular, single theme - for example putting up an ecommerce server with the honeynet to look for carders. The basic idea behind a tuned honeynet is to develop a honeynet or honeynets where you create an ecosystem of different types of cascading,serially discovered potential targets (ecommerce, technical database, email server, server with military-related files) and by encouraging the attacker to explore these differentially themed honeypots in a serial mode you can attract/repel them into differentially motivated bins (e.g.honeypots)- sort of like a sieve... I'm purposedly being a bit vague here but you should get the general principle... Cheers, Max Kilger, Ph.D. Social Psychologist Honeynet Project
Current thread:
- tiered or tuned honeynets Max Kilger (Jul 01)
- <Possible follow-ups>
- RE: tiered or tuned honeynets Glenn_Everhart (Jul 01)
- RE: tiered or tuned honeynets George Washington Dunlap III (Jul 01)
- RE: tiered or tuned honeynets Glenn_Everhart (Jul 01)