Re: Analysis: AboveNet attacks

[filipg () CORONA EPS PITT EDU (Filip M. Gieszczykiewicz)]

On Thu, 4 May 2000, Robert G. Ferrell wrote:
> > In penetration tests I have been involved with, any information I
> > acquire about the networks and systems that I otherwise wouldn't know
> > makes it much easier for me to find the weakness(es) in the defenses I
> > am testing.
>
> On the flip side of the coin, a truly clever company might make available
> intentionally false network/security architecture information, just to confuse
> potential attackers a bit.

Not 'confuse' so much as 'fingerprint' a possible attack. If you get 5
hits on machines that don't exist along with a series of probes that
yield data... you might have something interesting...