Honeypots
Hardware Performance of Honeyd Jan 12 2007 03:40AM
Sol_Invictus (sol haveyoubeentested org) (2 replies)
Re: Hardware Performance of Honeyd Jan 12 2007 06:08PM
David Watson (david honeynet org uk) (1 replies)
Sol_Invictus wrote:
> Could any of you provide examples of similar types of implementations,
> hardware performance examples, or any advice on what to be aware of?
>
> Our goal is a nice Class B network with random "Configured" systems for more
> info for some good reporting.. My main question is, would this system
> handle a class A honeynet?
>
> Any advice is always welcome, and I look forward to any replies.

Sol,

The rate of TCP connections and number of hops in your honeyd virtual
network topology will probably be the main performance factors.

Presumably you have already seen http://www.honeyd.org/performance.php
and
http://www.usenix.org/events/sec04/tech/full_papers/provos/provos_html/i
ndex.html

I`m not data for modern hardware has been published, but you might find
some of the following papers useful:

http://www.cs.wisc.edu/~pb/isink_final.pdf
http://www.diadem-firewall.org/workshop06/papers/monam06-paper-36.pdf
http://www.cs.ucsd.edu/~savage/papers/Sosp05.pdf
http://www.cc.gatech.edu/fac/kalyan/security-sims.htm

Hope that helps!

Thanks,

David

--
David Watson
UK Honeynet Project
www.ukhoneynet.org
david (at) honeynet.org (dot) uk [email concealed]

[ reply ]
Re: Hardware Performance of Honeyd Jan 16 2007 02:04PM
Michael Bailey (mibailey eecs umich edu)
Re: Hardware Performance of Honeyd Jan 12 2007 04:17AM
Valdis Kletnieks vt edu (1 replies)
Re: Hardware Performance of Honeyd Jan 12 2007 03:24PM
Arthur Clune (arthur honeynet org uk)


 

Privacy Statement
Copyright 2010, SecurityFocus