A honeypot is a computer security mechanism designed to detect and counter unauthorized access by simulating a valuable target for attackers. They can be classified by implementation (physical or virtual), purpose (production or research), and interaction level (high, low, or middle). Honeypots serve to prevent, detect, and respond to attacks, although they are primarily effective for research and limited information capture in production settings.

1. HONEYPOTS
HONEYPOTS
BY:-
Manoj Kumawat
R. No. 13075029

2. HONEYPOTS
• What is honeypot ?
A honeypot is a computer security mechanism
set to detect, deflect or counteract attempts at
unauthorized use of information system.
It’s simply a TRAP to attacker.

3. HONEYPOTS
• How it works ?
A honeypot consists of data that appears to be
a legitimate part of the site but is actually
isolated and monitored, and that seems to
contain information or a resource of value to
attackers, which are then blocked.

4. HONEYPOTS

5. HONEYPOTS
Architecture:
•As a bait
•Just some regular system
•More attractive

6. HONEYPOTS

7. HONEYPOTS
• HONEYPOT CLASSIFICATION:
By Implementation
• Virtual
• Physical
By purpose
• Production
• Research
By level of interaction
• High
• Low
• Middle?

8. HONEYPOTS
• IMPLEMENTATION OF HONEYPOT:
Physical
• Real machines
• Own IP Addresses
• Often high-interactive
Virtual
• Simulated by other machines that:
–Respond to the traffic sent to the honeypots
–May simulate a lot of virtual honeypots at the
same time

9. HONEYPOTS
• PROPOSE OF HONEYPOT:
Research
Complex to deploy and maintain.
Captures extensive information.
Run by a volunteer(non-profit).
Used to research the threats organization face.
Production
Easy to use
Capture only limited information
Used by companies or corporations
Mitigates risks in organization

10. HONEYPOTS
• INTERACTION LEVEL:
• Low Interaction
• High Interaction

11. HONEYPOTS
• LOW INTERACTION VS. HIGH INTERACTION:

12. HONEYPOTS
• Placement of honeypot
In front of the firewall (Internet)
DMZ (De-Militarized Zone)
Behind the firewall (intranet)

13. HONEYPOTS

14. HONEYPOTS
Honeypot Values:
•Prevention
•Detection
•Response

15. HONEYPOTS
Prevention:
•Keeping the burglar out of your house.
•Honeypots, in general are not effective
prevention mechanisms.

16. HONEYPOTS
Detection:
•Detecting the burglar when he breaks in.

17. HONEYPOTS
Response:
•Honeypots can be used to help respond to an
incident.

18. HONEYPOTS