Tarpits

• Tools to slow down attacks

  • Often used to slow SPAM or confound SPAM senders

• Slow down attacks or vulnerability scans

  • Not in wide deployment as a security tool
  • LaBrea: send fake SYN/ACK to connections attempted to non-existent hosts: tie up attackers resources