“Honeynets: High Value Security Data”

Abstract

This article will cover some of the discoveries that can be made using honeypot systems, exposed to the Internet. The material is based on the author’s experience running such a decoy network of UNIX machines for over a year. We will go through several examples of captured hacker tools and cover common attack examples. The subject of building a honeypot will be left outside the scope of the paper. As a staring point, the author’s presentation “Implementing the Honeypot” (http://www.tracking-hackers.com/conf/slides/implementing.pdf) from ITRA Honeypots Conference (Las Vegas, NV, November 2002) is recommended.