Tell me more ×
IT Security Stack Exchange is a question and answer site for IT security professionals. It's 100% free, no registration required.
up vote 4 down vote favorite
1

Is there a name for a system that is designed to be hacked into? (Alternatively, there may be a different name for a system that is designed to look like it is hacked in to?)

An is there a name for an executable that looks interesting (for example decryptor.executable next to temporary-backup.sql.encrypted) and is also a way to gather information about the hacker when it is executed?

share|improve this question
Gather what type of information exactly? – Ramhound Dec 29 '11 at 19:11
That is not known. In fact, it is not certain that we will implement the data collector. If implemented, it could be as simple as telling us it was in fact executed, and maybe the OS of the machine (we would also find out if it was executed on a different IP then where it was downloaded), it could send much more (directory structures), or even ask for instructions (a door into the hacker's environment). I would like to know if there is a name for anything similar, that is specifically designed as a response to an unsuccessful, seemingly successful hack attempt. – George Bailey Dec 29 '11 at 19:20
You might be able to get the ip address because your web server knows which a file has been accessed. You are unlikely to be able to anything beyond that. What you want to know is not clear. An unsucessful hack attempt is just that unsucesful. If you have an open backdoor to your server, then its just that, a backdoor. I suggest you figure out WHAT you want to do and ask this question again. This is way to vague. – Ramhound Dec 29 '11 at 20:49
1  
@Ramhound - It's a useful and widely-used anti-intrusion technique. Knowing what sort of attacks you may be subject to will help you protect against them. It may be a rather simple terminology question, but it's not a straightforward answer to search for. – pdubs Dec 29 '11 at 22:05
2  
@Ramhound - honeypots are widely used to collect information, not necessarily of the attacker's address, which is likely to be spoofed anyway, but their methods and techniques, specific code used, how they are targeting you etc. A great source of information – Rory Alsop♦ Dec 30 '11 at 11:13

1 Answer

up vote 9 down vote accepted

I believe the term you're looking for is "honeypot".

share|improve this answer

Your Answer

 
discard

By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.