
Honeypots 21
1.5 PLACEMENT OF HONEYPOTS
Honeypots can be placed externally as well as internally.
Conceptually they can be placed at three main locations in an
organization.
• External, i.e., facing the Internet
• Internal, i.e., behind the fi rewall
• On the DMZ
Honeypot placement is usually discussed in its relationship to
the perimeter-protecting fi rewall. Each location has its advantages
and disadvantages, depending on the honeypot goals. Figure 1.8:
Placement of honeypots.
Figure 1.8 Placement of Honeypot.
Honeypot
Firewall
Honeypot
DMZ
Honeypot
LAN
1.5.1 External Placement
The honeypots are placed outside the network perimeter when one
wants ...