Honeypots as an early warning system

16.12.2005

Developed for the Unix/Linux crowd, it comes in a Windows flavor, but the Windows version is old and buggy -- you're better off learning Linux from scratch than using the Windows version. Honeyd is a very flexible honeypot, but it must be cobbled together from scratch, and more sophisticated emulations, such as NetBIOS, aren't easy at all.

Other honeypots to consider are Alkasis' PatriotBox (Windows-based, GUI, $40, not nearly as feature-rich as KFSensor, but a good value), and SpecterA' (Windows-based, GUI, $899, contains many unique features not seen elsewhere).

For more information and details on honeypots, visit http://www.honeynet.org and http://www.honeypots.com.