|
Everything you need to know about honeypots
|
|
|
|
|
Contributed by Chad Brandt
|
|
|
|
Monday, 27 September 2004
Honeypots are a relatively new and highly dynamic technology. Because they are so dynamic, it is difficult to define just what they are. Honeypots are unique in that they are not a solution in and of themselves; they do not solve a specific security problem. Instead, they are highly flexible tools with many different information security applicationsThis contrasts with such technologies as firewalls and intrusion detection systems (IDSs), which are easier to define and understand as they solve specific problems. Firewalls are a prevention technology; they are network or host solutions that keep attackers out. IDSs are a detection technology; their purpose is to detect and alert security professionals about unauthorized or malicious activity. Honeypots are tougher to define because they can be involved in aspects of prevention, detection, information gathering, and much more. For the purpose of this book, we will define a honeypot as follows:
A honeypot is an information system resource whose value lies in unauthorized or illicit use of that resource.
Read Full Story Only registered users can write comments. Please login or register. Powered by AkoComment 1.0 beta 2! |