Honeypots mailing list archives

tiered or tuned honeynets


From: Max Kilger <MaxK () symresources com>
Date: Tue, 1 Jul 2003 14:07:12 -0400

Someone mentioned trying to find out more about the concept of tiered or
tuned honeynets.  Since I'm the one who coined the term "tuned honeynet"
I'll try to elucidate just a bit.

Tradionally when people have discussed creating honeynets with substantive
content they have focused on one particular, single theme - for example
putting up an ecommerce server with the honeynet to look for carders.  The
basic idea behind a tuned honeynet is to develop a honeynet or honeynets
where you create an ecosystem of different types of cascading,serially
discovered potential targets (ecommerce, technical database, email server,
server with military-related files) and by encouraging the attacker to
explore these differentially themed honeypots in a serial mode you can
attract/repel them into differentially motivated bins (e.g.honeypots)- sort
of like a sieve...

I'm purposedly being a bit vague here but you should get the general
principle...

Cheers,

Max Kilger, Ph.D.
Social Psychologist
Honeynet Project


Current thread: