'Know Your Enemy': Everything you need to know about honeypots (NewsForge)

[Posted September 27, 2004 by ris]

NewsForge takes some excerpts from the book Know Your Enemy: Learning About Security Threats. "Firewalls are a prevention technology; they are network or host solutions that keep attackers out. IDSs are a detection technology; their purpose is to detect and alert security professionals about unauthorized or malicious activity. Honeypots are tougher to define because they can be involved in aspects of prevention, detection, information gathering, and much more. For the purpose of this book, we will define a honeypot as follows: A honeypot is an information system resource whose value lies in unauthorized or illicit use of that resource."

(Log in to post comments)