Honeypots: Tracking Hackers

Jailed Environments

We will now cover a more complicated homemade honeypot solution—the jailed environment—often called chroot, or change root. It is a medium-interaction solution that can capture greater amounts of information. Jails are medium interaction because they provide some functionality like a true operating system. However, this functionality is limited; it does not emulate a full operating system. As such, jails are not high-interaction honeypots. Unlike port listeners, which we have just discussed, jailed environments create a virtual environment, an environment that appears to an attacker like a part of a system.

Jailed environments were not originally designed for honeypot technologies. Rather, they were developed as a security ...