More Honeypots

skip navigation

honeypots for windows
Chapter 8 - Other Windows-Based Honeypots
Honeypots for Windows
by Roger A. Grimes
Apress 2005
progress indicator progress indicatorprogress indicator progress indicator

There is at least one other Windows-based honeypot and many Unix-based honeypots that you may want to review. The other Windows honeypot is Honey-Potter (http://honeypott4.tripod.com). It was written by Moran Zavdi (moraniam@hotmail.com) as a honeypot for Windows 2000. During the installation, you can choose between simulating a Windows 2000 computer or a Solaris box. You can simulate FTP, POP3, SMTP (Exchange or Sendmail), and HTTP (port listener only) services. This honeypot supports only one connection at a time and logs events to a text file. It’s very limited and not widely tested or well known.

Note 

I also reviewed a honeypot appliance, but it did not compare favorably against the current software offerings.

The Tracking Hacker’s web site (http://www.tracking-hackers.com/solutions) and Honeypots.net (http://www.honeypots.net/honeypots/products) have extremely comprehensive lists of honeypots, both commercial and free. Many of the honeypots are not Windows solutions, but these sites are the best place to check to see if any new honeypot solutions have been released.

progress indicator progress indicatorprogress indicator progress indicator


Honeypots for Windows
Honeypots for Windows (Books for Professionals by Professionals)
ISBN: 1590593359
EAN: 2147483647
Year: 2006
Pages: 119

Similar book on Amazon
Honeypots: Tracking Hackers
Honeypots: Tracking Hackers
Know Your Enemy: Learning about Security Threats (2nd Edition)
Know Your Enemy: Learning about Security Threats (2nd Edition)
Virtual Honeypots: From Botnet Tracking to Intrusion Detection
Virtual Honeypots: From Botnet Tracking to Intrusion Detection
Malware Analyst's Cookbook and DVD: Tools and Techniques for Fighting Malicious Code
Malware Analyst's Cookbook and DVD: Tools and Techniques for Fighting Malicious Code

flylib.com © 2008-2017.
If you may any questions please contact us: flylib@qtcs.net