Search: Home Bugtraq Vulnerabilities Mailing Lists Jobs Tools Vista
Use a Honeypot, Go to Prison?
Kevin Poulsen, SecurityFocus 2003-04-16

SAN FRANCISCO--Using a honeypot to detect and surveil computer intruders might put you on the working end of federal wiretapping beef, or even get you sued by the next hacker that sticks his nose in the trap, a Justice Department attorney warned Wednesday.

Comments Mode:
Use a Honeypot, Go to Prison? 2003-04-17
Mark Rasch (2 replies)
Use a Honeypot, Go to Prison? 2003-04-19
Honeypots are for losers anyhow
Use a Honeypot, Go to Prison? 2003-04-17
Shivan (1 replies)
re: Logging 2003-04-22
Anonymous
Use a Honeypot, Go to Prison? 2003-04-17
Steve K.
Use a Honeypot, Go to Prison? 2003-04-17
Simon Edwards (1 replies)
Use a Honeypot, Go to Prison? 2003-04-17
Anonymous
Use a Honeypot, Go to Prison? 2003-04-17
Anonymous (2 replies)
Use a Honeypot, Go to Prison? 2003-04-17
Anonymous (1 replies)
Use a Honeypot, Go to Prison? 2003-04-18
Anonymous (1 replies)
Use a Honeypot, Go to Prison? 2003-04-18
Anonymous
Use a Honeypot, Go to Prison? 2003-04-17
Anonymous
Use a Honeypot, Go to Prison? 2003-04-17
Lockdown
Use a Honeypot, Go to Prison? 2003-04-17
Anonymous (1 replies)
Use a Honeypot, Go to Prison? 2003-04-17
yumadome (at) hotmail (dot) com [email concealed]
Use a Honeypot, Go to Prison? 2003-04-17
Anonymous
Use a Honeypot, Go to Prison? 2003-04-18
Anonymouse
Use a Honeypot, Go to Prison? 2003-04-18
Anonymous (1 replies)
Use a Honeypot, Go to Prison? 2003-04-18
Anonymous
Use a Honeypot, Go to Prison? 2003-04-18
Sectech
Use a Honeypot, Go to Prison? 2003-04-18
JMcDaniel
Use a Honeypot, Go to Prison? 2003-04-19
Anonymous
Use a Honeypot, Go to Prison? 2003-04-19
Anonymous
Use a Honeypot, Go to Prison? 2003-04-19
Madclicker
Use a Honeypot, modify /etc/motd 2003-04-21
Anonymous
Use a Honeypot, Go to Prison? 2003-04-21
Anonymous
Honeypot vs. Automobile 2003-04-21
Anonymous
fbi/cia/nsa scared of honeypots 2003-04-21
Anonymous
Use a Honeypot, Go to Prison? 2003-04-22
skulls and bones
Use a Honeypot, Go to Prison? 2003-04-22
Anonymous
"Salgado favors configurations where a hacker is invisibly rerouted to a honeypot after beginning an attack on a production machine."

that, Mr. Salgado, is not a honeypot. It's a firewall or IDS, based on known signatures and, therefore, unable to protect against latest and greatest at hacker's disposal.

Honeypots can emulate a real production server, good ones can "surround" this server and turn it into a "black hole," but they can't BE the actual production server. One of the most important features of honeypots is that all traffic is intruder-based.

[ reply ]

Link to this comment: http://www.securityfocus.com/comments/articles/4004/19550#19550







 

Privacy Statement
Copyright 2008, SecurityFocus