a system designed to lure attackers towards it in order to learn about new attacks or to draw attention away from the real system
-5
votes
0answers
68 views
how to you get anonymous to take on a cause? [closed]
Specifically, animal abusers. I have been trying to figure out a way without getting hacked. I am trying to post a picture of them tied to a post, but I think it might actually get them mad. I hope ...
5
votes
4answers
263 views
Do honeywords add any real security?
This paper proposes the concept of honeywords for detecting if a password database has been compromised.
As far as I understand it works like this:
You save n password hashes for each user, one that ...
5
votes
1answer
269 views
Setting up home lab with Snort and Vyatta - looking for resource recommendations or advice
I'm looking to turn a new desktop (Ubuntu 12.10-64bit) I built into a virtual home lab for testing and experimenting with various security things. The first setup I would like to try running is the ...
2
votes
3answers
278 views
How to lure a Hacker?
I am suspecting someone unauthorized is trying to or already in the network trying to get information on some data that we have. How can I lure this person to a "Honeypot" and gather information while ...
12
votes
4answers
680 views
Attract Brute Force SSH Attacks
I posted a question on Server Fault, but got downvoted and had the question closed.
One of the comments suggested looking over here, so here goes:
For my senior project, I'm working on an ...
4
votes
3answers
239 views
Are honeypots successful in preventing attacks?
I've been looking to set up a honeypot, but it seems that honeyd's source code is out of date, and there are few other options.
Which brings me to the question, does anyone employ honeypots as a ...
3
votes
3answers
343 views
Honeyd: log grows too fast
I'm having trouble with honeyd log; it grows way too fast. I started the honeyd daemon with
honeyd -l /var/log/honeypot/honey.log -u 1000 -g 1000 -f honeyd.conf
/var/log/honeypot/honey.log is 1+ ...
4
votes
2answers
289 views
Risks of running Honeypot [specific setup]
I'm planning to run a Honeypot with the following network setup:
In order to avoid the honeypot coming in direct contact with my Internal network, I put it behind a firewall configured on a Linux ...
2
votes
1answer
205 views
How do you analyze the data collected from honeypot software?
So you've successfully setup a honeypot. GREAT! Now what?! I've got all this amazing data but;
How do you analyze all the data collected from your honeypot software?
What should you be looking for? ...
0
votes
0answers
96 views
How do you connect honeyd to a web application? [closed]
Suppose I have a simple web application running Apache Tomcat running on a public facing IP/port.
According to the Honeyd website it says " Honeyd improves cyber security by providing mechanisms for ...
2
votes
1answer
311 views
How to set up a Virtual Machine for a Honeypot?
On this thread, it's stated that it's probably a good idea to use a VM for your honeypot. I believe this is because;
Comparative data is easier when comparing 2 exact images.
Host/Network Security ...
2
votes
1answer
377 views
How to set up a network for a honeypot?
This is a follow up for How to set up a Virtual Machine for a Honeypot?.
After setting up your Virtual Machine. You need to make sure that your network is properly configured so you don't end up ...
10
votes
2answers
281 views
Profiling hackers with keystroke dynamics
I am writing a research paper on tracking hackers and how to include keystroke timings to create a profile of hackers.
I want to combine the keystroke timings that I capture in ttylog with other data ...
8
votes
2answers
6k views
Setting up a honeypot
I have a spare computer lying around at my house, so I decided to turn it into a honeypot. So far, I have installed Windows XP (no service pack) on it and have set up rules on my router to forward ...
3
votes
1answer
198 views
How to forward an specific FTP User to a Honeypot?
What I'm trying to do is to forward a specific FTP-User to a Honeypot, because the main server is for Shared Hosting and there's a lot of traffic, and I don't want to spend all the resources in ...
8
votes
2answers
2k views
Can someone get my WPA2 password with honeypots?
Yesterday I went to my cousin's home and I saw that I'm not connected to his wireless (for internet access). Then I have looked up the list of wireless points. I have found his name and clicked it ...
1
vote
1answer
261 views
Is a honeypot an IDS or an IPS or something else? Is it an offensive or a defensive technique? Is it still effective?
I'd like to know where a Honeypot falls into the scheme of security, and if it is still an effective tool?
1
vote
0answers
142 views
Honeypot for catching a spammer [closed]
I've been receiving more and more emails and now even TXT messages originating from google voice for inquiries of items that I've listed for sale on craigslist.
What I would like to accomplish: I ...
2
votes
2answers
536 views
Interesting article on a vulnerability found in Tor
This article describes how French researchers compromised users using Tor. I'm not sure I fully understand or agree with it. I don't see what Bit Torrent has to do with anything? I mean they start out ...
1
vote
2answers
253 views
Can a TCP connection with a VM be “escaped from” to reach the host? [duplicate]
Possible Duplicate:
How secure are virtual machines really? False sense of security?
If a VM (e.g. VirtualBox) on host A opens a TCP connection to a hacker Z, are there any possible ...
14
votes
3answers
2k views
Recommendations for honeypot software
A couple of us wanted to setup a honeypot/honeynet with the goal of learning; not planned to be in a production environment. What's a good recommendation for a high interaction or low interaction ...
1
vote
2answers
839 views
Tracing an IP from a mobile broadband ISP
My honeypot caught a hack attempt from an IP that was issued by Three Mobile Broadband (UK).
My immediate thought was that most probable explanation was that the user was in the UK and had his ...
6
votes
2answers
594 views
How to attract traffic to a honeypot
I have set up a honeypot, but I am not happy with the low traffic load and I would like to trigger much higher traffic levels.
What methods would attract high bot activity? These are the ideas I ...
1
vote
1answer
94 views
Where to find a fake hierarchy for a honeypot for double-dot/path traversal attacks?
I would like to provide content when a hacker tries something like GET /../../../etc/passwd, but they may choose something else, other than passwd. I will install notification of when somebody does ...
5
votes
1answer
222 views
Using “canaries” to detect intrusion?
I haven't read much about such a technique, but I'm wondering if there's any sort of best practice around the use of "canaries" to detect certain types of intrusion:
Create a bogus account that ...
7
votes
2answers
222 views
Profiling attackers via adaptive games: “Strange game, the only winning move is not to play”
Use of Game Design to Profile Attackers:
Interested in any research that links concepts in game design to security systems in an effort to profile the attacker's identity, motives, skills, etc.; if ...
5
votes
1answer
660 views
How to operate a honeypot in the cloud?
Just finished reading "Honeypot on home network to help me learn", and the top-voted/selected answer that suggest deploying a honeypot to the cloud, but the answer does not say how to do it; also, ...
8
votes
3answers
585 views
Suggestion setting up a SQL injection honeypot
I just stumbled on a website vulnerable to an SQL injection attack by mistake ( http://stackoverflow.com/questions/6181248/is-this-site-vulnerable-to-an-sql-injection-attack ).
That made me curious ...
17
votes
4answers
1k views
Honeypot on home network to help me learn
I'm a pretty decent (IMO) web app penetration tester, but I'm eager to expand my knowledge of other areas of security. Given that I've just taken on something of an enhanced sysadmin role at my work, ...
4
votes
3answers
633 views
Windows Honeypot user account for tracking laptop
I've been wanting to create a dummy "Honeypot" user account on my Windows 7 laptop in case of theft.
My question is: Has anyone come across useful resources and tips for doing this? Is there a way ...
