DEFINITIONS
The goal of a Honeynet is to create an environment where the tools and behavior of blackhats can be captured and analyzed in the wild. Based on this information, we can gain intelligence on threats faced by the Internet community. A Honeynet works by creating a highly controlled environment that is probed, attacked, and compromised by blackhats. To create this highly controlled environment, two requirements must be met.
Data Control
Once a honeypot within the Honeynet is compromised, we have to contain the activity and ensure the honeypots are not used to harm non-Honeynet systems. There must be some means of controlling how traffic can flow in and out of the Honeynet, without blackhats detecting control activities.
Data Capture
Capture ...
Become an O’Reilly member and get unlimited access to this title plus top books and audiobooks from O’Reilly and nearly 200 top publishers, thousands of courses curated by job role, 150+ live events each month,
and much more.
Read now
Unlock full access