Honeypots: Simple, Cost-Effective Detection

by Lance Spitzner
Sept. 24, 2017 1 comment Symantec Detection & Response honeypots

This is the fourth article in an ongoing series examining honeypots. In previous installments, we have covered two different honeypot solutions: Honeyd and Specter. Both honeypots are low-interaction production solutions; their purpose is to help protect organizations, as opposed to research honeypots, which are used to gather information. Production honeypots work by emulating a variety of services and operating systems. Honeyd, an OpenSource solution, is considered more powerful and flexible than Specter, but it is also more difficult to use. Specter, a commercially supported solution, is easier to use as it runs on Windows. In this paper we take a step back for a moment and discuss the value of honeypot technologies in general. Why would you want to deploy production honeypots in your organization? How can a honeypot help security professionals to do their job more effectively?


2flash 2 months, 2 weeks ago

Definitely the trend topic of 2000s in cyber security. A pleasant afternoon lecture :)