Honeypot Farms

by Lance Spitzner
Sept. 25, 2017 1 comment Symantec Detection & Response honeypot

For the past six months this series of papers has covered a breadth of honeypot topics. We have covered everything from what honeypots are, their value and different types, to common misconceptions and legal issues. However, one thing we have yet to discuss is deployment. How can you deploy honeypots in your environment? For small organizations, this may be easy -- nothing more then installing a honeypot on a single computer and placing it on your local network. But what about organizations with hundreds of networks and thousands of computers? How can honeypots be easily deployed and managed in such large, distributed environments? One approach is that you don't. Instead, you simply consolidate all of your honeypots in a single honeypot farm, then you let the bad guys come to you.


2flash 7 months, 3 weeks ago

Honeypot topics were very trendy some time ago, but I like that this paper is presenting it in a different way :)