Intrusion Detection Systems mailing list archives

Re: RE: mouse trap + fight back!


From: JohnNicholson () aol com (JohnNicholson () aol com)
Date: Wed, 17 May 2000 16:21:35 EDT


Archive: http://msgs.securepoint.com/ids
FAQ: http://www.ticm.com/kb/faq/idsfaq.html
IDS: http://www-rnks.informatik.tu-cottbus.de/~sobirey/ids.html
UNSUBSCRIBE: email "unsubscribe ids" to majordomo () uow edu au
In a message dated 5/17/2000 3:59:04 PM Eastern Daylight Time, 
grwilliamson () Home com writes:

The legalities still play an important though,
 is it entrapment or did we put out a welcome message to greet the intruder.

We debated the "honeypot = entrapment" issue a while back.  I'd suggest you 
go to the archives and do a search on honeypot.  The short answer is that a 
honeypot is not entrapment, particularly not under US law. 

When someone breaks into your network, regardless of whether they break into 
a honeypot or your most sensitive files, they are still an unauthorized user. 
 For a further discussion of whether an unauthorized user of a system has 
committed a crime, see the article I wrote on the subject in the February 
2000 issue of USENIX; login:

John


Current thread: