Honeypots: Re: HoneyPot Tools

["Andy Cuff" <talisker () securitywizardry com>]

Hi Ponder,
Great idea to split them up though how about a slight change in the
definitions

Low interaction
no services/ simulated response

Medium Interaction
Virtual Services (ie detectable to the more advanced attacker)

High Interaction (HI)
Tools to help control and log output from compromised HI honeypots, as I see
a high interaction as a fully fledged host in it's own right.

c'mon Lance it's not like you to remain silent.  In fact I've witnessed
Lance when he's lost his voice, it was really spooky ;o)

thoughts from the list on categorising the interaction of honeypots??

I'll summarise the magnificent response early next week, but for now I'm
getting the evil eye from my other half because I brought all my servers in
from the garden shed to her lovely dining room.

take care
-andy

Talisker Security Tools Directory
http://www.securitywizardry.com
----- Original Message ----- 
From: "Ponder Le Stibbons" <ponderlestibbons () yahoo fr>
To: "Andy Cuff" <lists () securitywizardry com>
Cc: <honeypots () securityfocus com>
Sent: Thursday, July 01, 2004 9:56 PM
Subject: Re: HoneyPot Tools


> Bonjour,
>
> Good list!  Why not order them characterised by level
> of interaction:
>
> Honeypot Type:
> A) low interaction (no services)
> B) medium interaction (simulated services)
> C) high interaction (virtual machines)
>
>
> And perhaps mention the license:
> Open Source (GPL, MIT etc.)
> Proprietary (with source)
> Proprietary (no source)
>
> Cordialement,
>
> PLS
>
> --- Andy Cuff <lists () securitywizardry com> a écrit : >
> Hey!
> > I thought it was about time I updated the site with
> > a variety of
> > Honeypots some kind individuals have told me about.
> > Having just returned
> > from a 6 week adventure with the Navy (no comment)
> > the site is out of
> > date.  Therefore I'd appreciate being told of any
> > other honeypots that I was
> > missing, the ones I have so far are:
> >       BackOfficer Friendly
> >       Bubblegum
> >       HOACD
> >       HoneyWall
> >       Sebek2
> >       Specter
> >       Bait n Switch
> >       Deception Toolkit
> >       HSC
> >       KFSensor
> >       NetBait
> >       Smoke Detector
> >       Bigeye
> >       Decoy Server
> >       HoneyD
> >       LaBrea Tarpit
> >       NetFacade
> >       Sombria
> >
> > details at
> > http://www.securitywizardry.com/honeypots.htm
> >
> > take care
> > -andy
> > Talisker Security Tools Directory
> > http://www.securitywizardry.com
>
>
>
>
>
>
> Créez gratuitement votre Yahoo! Mail avec 100 Mo de stockage !
> Créez votre Yahoo! Mail sur http://fr.benefits.yahoo.com/
>
> Dialoguez en direct avec vos amis grâce à Yahoo! Messenger !Téléchargez
Yahoo! Messenger sur http://fr.messenger.yahoo.com
>