DEFINITIONS
The goal of a Honeynet is to create an environment where the tools and behavior of blackhats can be captured and analyzed in the wild. Based on this information, we can gain intelligence on threats faced by the Internet community. A Honeynet works by creating a highly controlled environment that is probed, attacked, and compromised by blackhats. To create this highly controlled environment, two requirements must be met.
Data Control
Once a honeypot within the Honeynet is compromised, we have to contain the activity and ensure the honeypots are not used to harm non-Honeynet systems. There must be some means of controlling how traffic can flow in and out of the Honeynet, without blackhats detecting control activities.
Data Capture
Capture ...
Get Honeypots: Tracking Hackers now with the O’Reilly learning platform.
O’Reilly members experience books, live events, courses curated by job role, and more from O’Reilly and nearly 200 top publishers.
