Honeypots

• Mostly a research tool today

  • Can be used operationally

• System intended to attract hostile activity

  • Gather information about tools and techniques
  • Distract attackers
  • Early warning on attacks/Identify new or variant attacks
    • Develop new signatures for virus scanners, NIDS