Honeypots mailing list archives

Q


From: Motayyam79 () aol com
Date: Sat, 23 Aug 2003 18:14:59 EDT

It is true that honeypots reduce noise and false negatives and solve a lot of 
the shortcomings that Intrusion detection systems have but isn't that purely 
because there is no production traffic? If intrusion detection systems were 
deployed on a network that did not have production traffic, it wouldn't generate 
a lot of false positives and the volume of information would reduce and would 
be of high value right? what makes honeypots unique?

thanks, 


Current thread: