Honeypots
5 likes•3,233 views
Honeypots are digital decoys that are designed to attract hackers in order to monitor their behavior and gather information. This document outlines different types of honeypots, including production honeypots used for real-time protection and research honeypots for educational purposes. It also describes various honeypot network configurations and diagrams their connections. The advantages of honeypots are their ability to capture new tools and tactics, while limitations include only monitoring direct interactions and not neighboring systems. The future plans are to make honeypot deployment and management easier through a bootable CD.
Honeypots
- 1. HONEYPOTS-TRACKING HACKERSFor Documentation and Downloads Visit
- 2. AbstractIt deals with and explores the fascinating world of Honey pots.
- 3. It describes a security tool and concept known as a Honey pot and Honeynet.
- 4. Honey Pots and Honeynets are digital network bait, and through deception, they are designed to actually attract intruders.OUTLINEHONEYPOT
- 7. ADVANTAGES
- 8. LIMITATIONSHONEYPOTSA honey pot is a computer system on the internet that is expressively set up to attract and trap people who attempt to penetrate other people’s computer Systems.
- 9. This includes the hacker, cracker, and script.
- 10. They have multiple uses, such as prevention, detection, or information gathering. DESIGN CONCEPT
- 11. Classification of Honeypots1.Production Honeypots Those used to protect organizations in real production operating environments.2.Research Honeypots. They represent educational resources of demonstrative and research nature whose objective is centered towards studying all sorts of attack patterns and threats.
- 12. NETWORK WIRING MECHANISMSFigure 1Figure 1 - Honey net with one honey pot and management host using a shared networkAll cables shown as green are standard twisted pair cables.
- 13. 2 Hubs or switches are used to connect interfaces together, along with 5 cables.
- 14. The management host only needs to have one network interface.Figure 2 Figure 2 - Honey net with two honeypots and management host using a shared networkThe above figure extends the design to include multiple honeypots off the internal interface of the honey wall.
- 15. This design, while simple and easy to understand, also has some serious security implications on the outside of the honey wall. Figure 3 Figure 3 - Honey net with one honey pot and management host and direct connectionsAll cables shown in green are standard twisted pair cables.
- 16. All cables shown in red are cross-over twisted pair cables.
- 17. Cross-over cables eliminate the need to use hubs or switches to connect two 10 Base- t interfaces together. Figure 4Fig: Honey net with two honeypots on a shared network and management host using a direct connectionThe main benefit to these last two configurations is that communication between the honey wall and the management host is entirely segregated (and thus hidden) from the shared network on the left.ADVANTAGESThey are designed to capture anything that interacts with them, including tools or tactics never seen before.
- 18. This means that resources can be minimum and still enough to operate a powerful platform to operate at full scale.
- 19. A computer running with a Pentium Processor with 128 Mb of RAM can easily handle an entire network. LIMITATIONSThey can only scan and capture activity destined to interact directly with them.
- 20. They do not capture information related to attacks destined towards neighboring systems
- 21. Inherently, the use of any security technology implies a potential risk. Honeypots are no different because they are also subject to risks. FUTURE PLANSThe future plans are to make the Honey net deployment and management easy.
- 22. In next phase the Honey net Project would be releasing a bootable CDROM that will boot into a Honey net gateway or Honey wall.
- 23. The bootable gateway would have all the Data Control and Data Capture mechanisms as defined above. CONCLUSIONHoneypots have tremendous potential for the security community, and they can accomplish goals few other technologies can.
- 24. Like any new technology, they have some challenges to overcome.
- 25. Most likely none of these problems will ever be completely solved or eliminated.
- 26. However, expect to see in the next 12 to 18 months many new developments that help address these, and other issues.ANY QUIRIES…?For Documentation and Downloads Visit
- 27. THANK YOU