OSEC

Neohapsis is currently accepting applications for employment. For more information, please visit our website www.neohapsis.com or email hr@neohapsis.com
 
From: trevor telford (pornttyahoo.com)
Date: Mon May 27 2002 - 13:48:30 CDT

  • Messages sorted by: [ date ] [ thread ] [ subject ] [ author ]

    I just came across an interesting paper on building
    virtual honeynets on http://www.securitywriters.org/

    The paper is here:
    http://www.securitywriters.org/texts/internet%20security/Virtual_HoneyNet.php

    TT

    --- Geoffrey Hing <hingcis.ohio-state.edu> wrote:
    > Hello,
    >
    > I've hacked together a Perl setup script that
    > configures a very basic
    > user mode linux virtual honeynet. The setup script
    > creates and copies
    > configuration files to the filesystem files for the
    > honeypots and
    > customizes physical-host-side swatch, snort, and
    > iptables configurations
    > based on a global configuration file for the
    > honeynet and honeypots.
    >
    > A diagram of the honeynet that the script sets up is
    > available at
    >
    http://www.cis.ohio-state.edu/~hing/honeynet/uml_honeynet-network_diagram.png
    >
    > The script can be downloaded from
    > http://www.cis.ohio-state.edu/~hing/honeynet/dl/ if
    > anyone is
    > interested.
    >
    > The script and honeynet are pretty rough at this
    > point and definitely
    > not suited for production environments, but I
    > thought they might be of
    > interest to people like myself who are just getting
    > started in deploying
    > virtual honeynets.
    >
    > Cheers,
    > Geoff
    >

    > ATTACHMENT part 2 application/pgp-signature
    name=signature.asc

    __________________________________________________
    Do You Yahoo!?
    Yahoo! - Official partner of 2002 FIFA World Cup
    http://fifaworldcup.yahoo.com

    ---------------------------------------------------------------------
    To unsubscribe, e-mail: honeypots-unsubscribesecurityfocus.com
    For additional commands, e-mail: honeypots-helpsecurityfocus.com
    ---------------------------------------------------------------------
    This list is provided by the SecurityFocus Security Intelligence Alert
    (SIA) Service. For more information on SecurityFocus' SIA service
    which automatically alerts you to the latest security vulnerabilities.
    Please, see: https://alerts.securityfocus.com/