On Tue, 11 Oct 2005 11:09:17 EDT, "Payton, Zack" said:
> Sure, What about writing a paper about the best way to monitor
> processes on a production box and processes transfer and tcp redirect to
> honeypot in event of anomaly.
And for the PhD thesis, devise a way to make sure that you don't accidentally
relocate the Oracle job running this week's payroll. The DBA tends to get
miffed when production workload gets moved to the honeypot.
(In other words, make sure your method does something reasonable with
false positives)
- application/pgp-signature attachment: stored
Received on Oct 11 2005