安全新兵营第九天：蜜罐系统

InfoWorld Security Boot Camp: Day 9: Set up a honeypot

October 1, 2009

YOUR ASSIGNMENT TODAY: Set up a honeypot.   WHY DO IT: It's one of the best ways to get early warning of internal attackers on your network.   HOW TO DO IT: Keep the project secret. Then, take a few computers that are destined for de-provisioning or the scrap heap and turn them into your honeypots. Without a doubt, my favorite honeypot software program is KFSensor. No other honeypot software is as easy to use and feature rich. Be sure to block all connections from the honeypot to destinations outside your network to prevent illegitimate use of a compromised asset against an innocent third party.   RECOMMENDED READING: " Honeypots: A sweet solution to the insider threat," Infoworld.com