RE: tiered or tuned honeynets

[George Washington Dunlap III <dunlapg () umich edu>]

On Tue, 1 Jul 2003 Glenn_Everhart () bankone com wrote:

> This concept could perhaps fool attackers, but wherever I've tried to
> implement "deep" deception sites, they became difficult to maintain as
> believable ones. The old adage "Oh, what a tangled web we weave, when
> first we practice to deceive." applies.

I've been thinking about doing some work on an automated system to set up
such sites, so I'm wondering: what about it was difficult to maintain?  
Was it the deception part (i.e., somehow keeping the data believable), or
just the normal administration (patches, upgrades, etc.)?

 -George

-- 
+-------------------+-----------------------------------------
| dunlapg () umich edu | http://www-personal.umich.edu/~dunlapg 
+-------------------+-----------------------------------------
| "Pointing and clicking is like a baby pointing and 
| screaming.  Stuff gets done, but it's a lot faster to ask 
| in an intelligible language. I'll never give up a great 
| shell... for a prettier interface."  
|       -SHEENmaster on Slashdot.org
+------------------------------------------------------------
| Outlaw Junk Email! Support HR 1748 (www.cauce.org)