Re: which part of dynamic honeypot that needs 'intelligent'?

["Randy" <randy.bachman () west-point org>]

I'm flushing out details for implementation and response plans for a highly 
interactive honeynet on the part of the admin...haven't come up with a term 
that fully grasps where I want to go with this yet. honey TRAP comes to 
mind, since I do want to continually make things not work for the intruder 
after I get them interested and show initial success.

I'm also doing the certification and accreditation documentation for this 
now

I'd say the intelligent part would be masking images or networks that look 
like what the attackers is trying to go for...it would also have the type of 
information he was looking for

Randy
----- Original Message ----- 
From: "dcneting" <dcneting () yahoo com>
To: <honeypots () securityfocus com>
Sent: Wednesday, April 20, 2005 7:25 AM
Subject: which part of dynamic honeypot that needs 'intelligent'?


> im attracted to Lance's idea about dynamic honeypot.
>
> im planning to embed AI inside dynamic honeypot
> architecture. till now im still wandering which part
> of the dynamic honeypot that needs to be
> 'intelligent'. currently im thinking about embedding
> AI in processing the collected p0f data. matbe you
> guys have a lot more things to suggest..
>
> im new to network security and honeypots.it sure takes
> me a lot of time to discover the problems within it as
> im from the AI background.
>
> suggest me some clues about the problem within dynamic
> honeypot that 'intelligent techniques' could solve.
>
> thanks in advance :)
>
> __________________________________________________
> Do You Yahoo!?
> Tired of spam?  Yahoo! Mail has the best spam protection around
> http://mail.yahoo.com