A Virtual Honeypot

1
A Virtual Honeypot
Guided By- Presented By- Richard
Sinn
Kunjan Kapadia 005239898
2
Agenda

• Introduction
• Design And Implementation
• Architecture
• Advantage and Disadvantages
• Application of Honeypot
• Conclusion

3
Introduction

• A closely monitored computer resource
• A Early warning tool
• Requires less space and cost
• Arbitrary routing topology
• Types of Honeypot
• Low-Interaction Honeypot
• High-Interaction Honeypot

4
Design And Implementation

• Honeyd-Lightweight framework for creating
  virtual honeypot

5
Architecture

• Architecture consist of several component
• A configure database
• Packet dispatcher
• Personality engine
• Routing component
• Protocol handler

6
Advantages And Disadvantages

• Advantages-
• Small datasets of high value
• New tools and tactics
• Minimal Resource
• Encryption of IPv6
• Information
• Simplicity
• Disadvantage-
• Limited view
• Risks

7
Applications

• Network Decoys
• Detecting and countering worms
• Spam prevention

8
Conclusion

• I would like to conclude that honeypots are not
  made for a specific problem like NIDS. They can
  be deployed to different areas of system security
  such as Worm detection, worm countermeasures and
  Spam prevention.
• Honeypots have no individual production value but
  their value can be determined by the information
  we obtain from it.

9
References

• http//students.kennesaw.edu/hmm5659/formal20rep
  ort_files/image008.gif
• http//www.fp6-noah.org/publications/deliverables/
  D1.1.pdf
• Niels Provos, A Virtual Honeypot Framework
  Google, Inc.
• Lance Spitzner, Honeypots Definitions and Value
  of Honeypots