Honeypots: Tracking Hackers

Mitigating Risk

Security is all about reducing risk. We can never eliminate the chance of something going wrong, but we want to reduce the possibilities as much as possible. Implemented properly, honeypots contribute to an organization’s security model and help reduce risk. However, implemented incorrectly, the honeypot can give an attacker an open window into an organization. When implementing honeypots, we need to reduce the chance of something going wrong with the honeypot itself. Honeypots should reduce, not increase, risk.

The first step to reducing risk is focusing on the level of interaction. As discussed in previous chapters, the greater the level of interaction, the greater the complexity and risk of something going wrong. A jailed ...