Closer Integration with Technologies
Currently, honeypots are deployed as a standalone technology; they have little interaction with other solutions. When a honeypot captures an attack, that information is collected in a vacuum; it is not collaborated with any other resources. In the future honeypots may work with other security mechanisms, such as firewalls or IDS sensors.
For example, one of the greatest disadvantages with IDS solutions is false positives and false negatives, as we discussed in Chapter 4. If a honeypot were combined with an IDS solution, the honeypot may be able to reduce these problems. Perhaps both the honeypot and IDS sensor could share a backend database, where the data collected from both is stored and compared. The honeypot ...
Become an O’Reilly member and get unlimited access to this title plus top books and audiobooks from O’Reilly and nearly 200 top publishers, thousands of courses curated by job role, 150+ live events each month,
and much more.
Read now
Unlock full access