Tarpits

• Tools to slow down attacks

  • Often used to slow SPAM or confound SPAM senders

• Slow down attacks or vulnerability scans

  • Not in wide deployment as security tool
  • LaBrea: send SYN/ACK to connections attempted to non-existent hosts... tie up attacker's resources