RE: Virtual Honeypot Users

["Freddie Beaver" <frebea44 () earthlink net>]

You mean people actually deploy homeypots (virtual or not) and don't
simulate traffic?? :-) I usually will stop at the store that has a full
parking lot. 

A comparison can be made with the success of a certain large, department
store chain. Build a huge store with everything in it, sale cheap, hire
cheap, and let its convenience and size draw customers and run small
competitors out of business. Things that make you go hummmm...
 
Fred

-----Original Message-----
From: Brian Burton [mailto:brianburton () telus net] 
Sent: Monday, June 14, 2004 5:05 PM
To: honeypots () securityfocus com
Subject: Virtual Honeypot Users

I've been thinking about this lately and wonder what others think...

Basically do you think it would be worth it to simulate actual users logging
in and doing tasks on honeypots?  

I know you'd then have additional activity on the honeypot you'd have to
account for but just thought this would be an interesting addition for them
making them more realistic.  

I thought of it since when hackers do get into the box they for sure check
if anyone is logged on and I'd assume it always seem odd if no one is ever
logged in or anything additional has happened since the previous time
they've been on.

I'm sure others have thought of this or something similar so was curious on
what you think about doing this.



Brian