OSEC

Neohapsis is currently accepting applications for employment. For more information, please visit our website www.neohapsis.com or email hr@neohapsis.com
IDS Archives: IDS: Re: RE: RE: Honey pots / decoy servers

IDS: Re: RE: RE: Honey pots / decoy servers

Ryan Matthew Ferris (ryan25wenet.net)
Tue, 24 Aug 1999 21:08:42 -0700

FAQ: See http://www.ticm.com/kb/faq/idsfaq.html
IDS: See http://www-rnks.informatik.tu-cottbus.de/~sobirey/ids.html
HELP: Having problems... email questions to ids-owneruow.edu.au
NOTE: Remove this section from reply msgs otherwise the msg will bounce.
SPAM: DO NOT send unsolicted mail to this list.
USUBSCRIBE: email "unsubscribe ids" to majordomouow.edu.au
--------------------------------------------------------------------------- 

---
Can you gives us the public record for cases admissable as public evidence?

Ryan Ferris
ryan25wenet.net
-----Original Message-----
From: Brotschi, Brian <Brian_Brotschinai.com>
To: 'Blyth A J C (Comp)' <ajcblythglam.ac.uk>; idsuow.edu.au
<idsuow.edu.au>
Date: Wednesday, August 25, 1999 8:07 PM
Subject: IDS: RE: RE: Honey pots / decoy servers

>FAQ: See http://www.ticm.com/kb/faq/idsfaq.html
>IDS: See http://www-rnks.informatik.tu-cottbus.de/~sobirey/ids.html
>HELP: Having problems... email questions to ids-owneruow.edu.au
>NOTE: Remove this section from reply msgs otherwise the msg will bounce.
>SPAM: DO NOT send unsolicted mail to this list.
>USUBSCRIBE: email "unsubscribe ids" to majordomouow.edu.au
>---------------------------------------------------------------------------
>---
>When using the NAI CyberCop Sting to bait and capturing a trace file with a
>NAI Sniffer.  The NAI Sniffer trace file has been considered as admissible
>evidence in a court of Federal law.
>Brian M Brotschi
>Sales Engineer Manager, Northwest
>Santa Clara, CA
>Ext. 5235
>PGP Fingerprint 97A4 B770 5689 725B 6FAD  4643 62FB 9AB9 8E7A 23A2
>While you are reading this message, who is watching your network ?
>http://www.nai.com
>
>
>-----Original Message-----
>From: Blyth A J C (Comp) [mailto:ajcblythglam.ac.uk]
>Sent: Wednesday, August 25, 1999 12:58 AM
>To: idsuow.edu.au
>Subject: IDS: RE: Honey pots / decoy servers
>
>
>FAQ: See http://www.ticm.com/kb/faq/idsfaq.html
>IDS: See http://www-rnks.informatik.tu-cottbus.de/~sobirey/ids.html
>HELP: Having problems... email questions to ids-owneruow.edu.au
>NOTE: Remove this section from reply msgs otherwise the msg will bounce.
>SPAM: DO NOT send unsolicted mail to this list.
>USUBSCRIBE: email "unsubscribe ids" to majordomouow.edu.au
>---------------------------------------------------------------------------
>---
>> Honeypots and decoy servers have been around for years, and at one time
or
>> another many of us have experimented with the Deception ToolKit or
similar
>> technologies.  I am now seeing plenty of press coverage for products like
>> Recourse ManHunt and Network Associates Cybercop Sting, generally
>> associated with collecting forensics evidence.
>>
> [Blyth A J C (Comp)]
>
> Another question is is the evidence admissible in a court of law.
>Many countries have
> different laws about how evidence is to be managed and analysed.
>
>
>Andrew.
>

This archive was generated by hypermail 2.0b3 on Thu Aug 26 1999 - 14:36:42 CDT