Stay Ahead With Linux Security News

network securitydetectionopen source

Exploring Honeypots: Cost-Effective Methods for Network Protection

Lance Spitzner submits, "This one should shake up the IDS community!" This is the fourth article in an ongoing series examining honeypots. In previous installments, we have covered two different honeypot solutions: Honeyd and Specter. Both honeypots are low-interaction production solutions; their purpose is to help protect organizations, as opposed to research honeypots, which are used to gather information.. . .. Lance Spitzner submits, "This one should shake up the IDS community!" This is the fourth article in an ongoing series examining honeypots. In previous installments, we have covered two different honeypot solutions: Honeyd and Specter. Both honeypots are low-interaction production solutions; their purpose is to help protect organizations, as opposed to research honeypots, which are used to gather information. Production honeypots work by emulating a variety of services and operating systems. Honeyd, an OpenSource solution, is considered more powerful and flexible than Specter, but it is also more difficult to use. Specter, a commercially supported solution, is easier to use as it runs on Windows. In this paper we take a step back for a moment and discuss the value of honeypot technologies in general. Why would you want to deploy production honeypots in your organization? How can a honeypot help security professionals to do their job more effectively? As you are about to find out, the answer is very simple: honeypots are a simple, cost-effective way to detect illicit, unauthorized activity. This article will examine the role of detection in the overall security strategy. It will then discuss some traditional detection approaches as well as some problems inherent in those approaches. It will then show how honeypots effectively overcome those problems, thereby strengthening the detection component of the security strategy. The link for this article located at Security Focus is no longer available. . Explore how traps serve as an efficient, budget-friendly mechanism for identifying illicit actionswithin digital environments.. Honeypot Solutions, Network Detection, Cost-Effective Security. . Anthony Pell

Apr 30, 2003 • Anthony Pell Network Security