Honeypots mailing list archives
Q
From: Motayyam79 () aol com
Date: Sat, 23 Aug 2003 18:14:59 EDT
It is true that honeypots reduce noise and false negatives and solve a lot of the shortcomings that Intrusion detection systems have but isn't that purely because there is no production traffic? If intrusion detection systems were deployed on a network that did not have production traffic, it wouldn't generate a lot of false positives and the volume of information would reduce and would be of high value right? what makes honeypots unique? thanks,
Current thread:
- Q Motayyam79 (Aug 23)
- Re: Q Richard Stevens (Aug 25)