Library / sourced records

Resource library

Search by kind, technique, environment or critical-reading notes. Each record states its source and what material was reviewed.

770published resources

Results

316 found

Paper2005

Scalability, fidelity, and containment in the potemkin virtual honeyfarm

Material reviewed: Abstract

The paper addresses the tension between scalability and fidelity in network honeypots used to gather intelligence on malware, and proposes reducing it through a prototype honeyfarm system called Potemkin. According to the authors, Potemkin uses virtual machines, aggressive memory sharing, and late binding of resources to emulate the execution behavior of individual hosts at large scale.

NetworkHoneypot

Paper2004

Ermittlung von Verwundbarkeiten mit elektronischen Koedern

Material reviewed: Abstract

This paper provides an introduction to honeypots (electronic bait), network resources designed to be attacked and compromised, indistinguishable from regular systems. According to the authors, these systems can be interconnected into honeynets equipped with special software facilitating forensic analysis of incidents. The work describes the setup and first experiences of such a network deployed at RWTH Aachen University, aiming to learn about attacker behavior in networks.

NetworkHoneypot

Paper2004

Honeycomb

Material reviewed: Abstract

The paper describes a system for generating attack signatures for network intrusion detection systems, applying pattern-matching techniques and protocol conformance checks at multiple levels of the protocol hierarchy to network traffic captured at a honeypot system. The authors report results from running the system for 24 hours on an unprotected cable modem connection, where it created precise traffic signatures.

NetworkHoneypot

Paper2004

Modelling the costs and benefits of Honeynets

Material reviewed: Abstract

This paper proposes a model for estimating the costs and benefits associated with deploying honeynet technology, an area where, according to the authors, a clear framework for optimal security resource allocation was lacking. The stated goal is to foster informed reasoning about the adoption of honeynets as an IT security measure.

NetworkHoneypot

Each record shows the source reviewed. Vendor claims and independent results are labeled separately.