Deception Engineering – Intrusion Detection Honeypots(twitter.com)

1 pointsby Anapologetosvor 4 Jahren1 comments

Deception Engineering – Intrusion Detection Honeypots

https://twitter.com/securityonion/status/1501653974151319563

1 comments

Security Onion (FOSS security monitoring platform ) 2.3.110 is now available with the ability to easily deploy Intrusion Detection Honeypots. Deploy an IDH node for low noise + high fidelity alerts when someone is poking around in your organization where they shouldn't be!

"An Intrusion Detection Honeypot (IDH) is a security resource placed inside your network perimeter that generates alerts when probed or attacked. These systems, services, and tokens rely on deception to lure attackers in and convince them to interact. Unbeknownst to the attacker, you’re alerted when that interaction occurs and can begin investigating the compromise." - Intrusion Detection Honeypots (Sanders, C):