Honeypots Monitoring Attackers

  • Upload
    inteco

  • View
    243

  • Download
    0

Embed Size (px)

Citation preview

  • 8/8/2019 Honeypots Monitoring Attackers

    1/11

    Mlakyultp# hlaotl~oaj bttb`gk~p Ubjk 2 li 22Oail~hbtola Pk`{~ot Lnpk~ybtl~

    Oa `lhu{tk~ pk`{~ot# b mlakyult op b tllc {pkd tl c{~k bttb`gk~p bad babcpk tmko~

    nkmbyol{~ oa tmk Oatk~akt! Ot pkkhp b `lat~bdo`tola# bp tmk l~doab~ i{a`tola li pk`{~ot

    tllcp op u~k`opkc tmk luulpotk6 tl gkku bttb`gk~p bzb bad u~kykat tmko~ bttb`gp! Mlzkyk~#

    poa`k b ikz kb~p bjl# mlakultp b~k {pkd tl d~bz bttb`gk~p oatl b `lat~lcckd

    kayo~lahkat bad bttkhut tl galz hl~k dktbocp bnl{t mlz tmk `b~~ l{t tmko~ bttb`gp# bad

    kyka tl ioad l{t akz y{cak~bnocotokp!

    O Moptl~ bad l~ojoap

    Cba`k Puotvak~# `lap{ctbat bad `lhu{tk~ babcpt# k}uk~t oa pk`{~ot# n{oct b po}(`lhu{tk~aktzl~g oa mop lza ml{pk bt tmk nkjoaaoaj li tmk kb~ >555! Mk dkpojakd tmop aktzl~g tl

    pt{d tmk bttb`gk~p nkmbyol{~ bad zbp li b`tola! Mk zbp lak li tmk io~pt ~kpkb~`mk~p tl

    bdlut tmbt odkb bad# tldb# mk op lak li tmk hlpt u~lhoakat k}uk~tp oa mlakultp#

    u~k`{~pl~ li tmk Mlakakt U~lfk`t -zzz!mlakakt!l~j/# ~{aaoaj i~lh 2???# bad b{tml~ li

    tmk nllg .Mlakultp6 T~b`goaj Mb`gk~p!

    Tmop zbp b t~obc pptkh il~ bchlpt lak kb~# i~lh Bu~oc >555 tl Ikn~{b~ >552# pbyoaj bcc

    tmk jkak~btkd oail~hbtola! Tmk ~kp{ctp pulgk il~ tmkhpkcykp6 oa tmlpk uk~oldp zmka

    bttb`gp zk~k hl~k oatkapk# mk pbz tmbt tmk hl~k {p{bc zbp li b``kpp tl tmk `lhu{tk~p

    oa mop ml{pkmlcd zk~k p`baakd i~lh l{tpodk mop aktzl~g# {u tl 24 tohkp b db# n hkbap

    li b{tlhbtkd bttb`g tllcp!

    Poa`k tmka# b zmlck `lhh{aot li dkykcluk~p mbp nkka n{oct b~l{ad mlakakt!l~j#

    liik~oaj bcc goad li tllcp bad bdyo`k tl {pk tmkh!

    OO @cbppoio`btola

    B mlakult hb nk pohuc b `lhu{tk~ k}k`{toaj b u~lj~bh# zmo`m babcpkp oa`lhoaj

    bad l{tjloaj t~biio` nktzkka tmk Oatk~akt bad tmk `lhu{tk~# coptkaoaj oa ba a{hnk~ li

    ul~tp! Tmk u~l`kd{~k op oatkadkd tl hboatboa b zkbgakpp l~ y{cak~bnocot oa b plitzb~k

    u~lj~bh# luk~btoaj pptkh# u~ltl`lc l~ oa ba ltmk~ `lhu{tk~ kckhkat tmbt `ba nk

    bttb`gkd# zmo`m ckbdp bttb`gk~p tl {pk ot# pl tmbt tmk b~k zoccoaj tl khucl bcc tmko~ pgoccp tl

    k}uclot tmbt y{cak~bnocot bad jboa b``kpp tl tmk pptkh!

    La tmk ltmk~ mbad# b mlakult `ba nk bp `lhuck} bp b `lhucktk aktzl~g li i{cc

    i{a`tolabc `lhu{tk~p# zl~goaj {adk~ doiik~kat luk~btoaj pptkhp bad u~lyodoaj b j~kbt

    a{hnk~ li pk~yo`kp! Zmka b pptkh oa`c{dkd oa tmbt aktzl~g op oa plhk zb bttb`gkd# tmk

    bdhoaopt~btl~ op zb~akd!

    Oaptot{tlAb`olabcdkTk`alcljbpdkcb@lh{ao`b`oa

    LNPK^YBTL^_

    Altknllg

    MLAK_ULTP# HLAOTL^OAJ BTTB@GK^P

    OAIL^HBTOLA PK@[^OT_ LNPK^YBTL^_

    http://www.honeynet.org/http://www.honeynet.org/
  • 8/8/2019 Honeypots Monitoring Attackers

    2/11

    Baltmk~ zodkc {pkd lutola op tl `~kbtk kato~kc yo~t{bc mlakultp6 `lhu{tk~ u~lj~bhp

    puk`oio`bcc dkpojakd tl poh{cbtk b aktzl~g# dk`koyk tmk bttb`gk~ zotm ibcpk bdd~kppkp#

    ibgk OUp bad ala(k}optoaj `lhu{tk~p# zotm tmk lac u{~ulpk tl `lai{pk tmk bttb`gk~ l~

    ka`l{~bjk tmk bttb`g oa l~dk~ tl babcpk akz hktmldp! Oi mlakultp mbyk plhktmoaj oa

    `lhhla zotm kb`m ltmk~ op tmbt tmk dl alt ptl~k ba ohul~tbat oail~hbtola# bad# kyka

    tml{jm ot hb pkkh tmk luulpotk# oi {pk~ ubppzl~dp l~ dbtb b~k pmlza# tmkpk b~k

    `lhucktkc io`totol{p!

    Ohbjk 26 Mlhk ubjk li tmk Mlakakt U~lfk`t

    Pl{~`k6 OATK@L

    Mlakultp b~k `cbppoiokd b``l~doaj tl doiik~kat `btkjl~okp6

    OOO Mojm(oatk~b`tola mlakultp

    Tmk b~k hboac {pkd n `lhubaokp oa tmko~ `l~ul~btk aktzl~gp! Tmkpk mlakultp b~k

    n{oct zotm ~kbc hb`moakp l~ hbdk {u li lac lak ~kbc hb`moak zotm b ptbadb~d luk~btoaj

    pptkh# p{`m bp tmk lak ba {pk~ `l{cd {pk! Tmk b~k ucb`kd oa tmk `l~ul~btk u~ld{`tola

    aktzl~g! Oi tmk b~k `laioj{~kd `l~~k`tc# ba bttkhut tl b``kpp tmkh pml{cd jkak~btk ba

    bck~t tmbt pml{cd nk tbgka oatl b``l{at! Bp tmko~ {pki{cakpp op al ltmk~ tmba tl nk bttb`gkd#

    tmk ib`t tmbt tmk~k op plhklak t~oaj tl b``kpp tmbt ~kpl{~`k hkbap# n dkioaotola# tmbtplhktmoaj op z~laj!

    Kyk~ oatk~b`tola zotm tmop mlakult op ~kjb~dkd bp p{puo`ol{p n dkioaotola! Bcc tmop t~biio`

    h{pt nk buu~lu~obtkc hlaotl~kd bad ptl~kd oa b pk`{~k b~kb li tmk aktzl~g# zmo`m b

    ultkatobc bttb`gk~ h{pt alt mbyk b``kpp tl! Tmop op pl nk`b{pk# oi ot zbp b ~kbc bttb`g# tmk

    mb`gk~ `l{cd oa t{~a ~khlyk bcc tmk t~biio` jkak~btkd n tmkh bad tmk t~b`kp ckit# bad#

    tmk~kil~k# tmk bttb`g zl{cd alt nk alto`kd bad tmk mlakult zl{cd mbyk al ~kbc {pk!

    Tmk bdybatbjk liik~kd n mojm(oatk~b`tola mlakultp op tmbt tmk `ba u~kykat bcc goad li

    bttb`gp# nltm galza bad {agalza! Bp ot op b ~kbc pptkh# ot `latboap bcc galza bad

    {agalza plitzb~k k~~l~p zmo`m ba ltmk~ pptkh hb bcpl mbyk! Oi ba bttb`gk~ bttkhutp

    tl tbgk bdybatbjk li b pl ib~ {agalza icbz -galza bp 5 db oa `lhu{tk~ pcbaj/# ot zocc nk

    Mlakyultp# hlaotl~oaj bttb`gk~p Ubjk > li 22Oail~hbtola Pk`{~ot Lnpk~ybtl~

  • 8/8/2019 Honeypots Monitoring Attackers

    3/11

    tmk yk~ oatk~b`tola zotm tmk `lhu{tk~ tl t~ tl k}uclot tmk icbz tmbt zocc zb~a li tmk u~lnckh

    bad mkcu ioad tmk akz iboc{~k! Oa `lat~bpt# il~ oaptba`k# b pojabt{~k(nbpkd oat~{pola

    dktk`tola pptkh -ODP/ `l{cd zb~a oa tmk aktzl~g li lac bttkhutp tl k}uclot galza icbzp

    l~ bttb`gp# il~ zmo`m ot mbp pojabt{~kp tl odkatoi tmkh! Tmk bdybatbjk li b mlakult op

    tmbt tmk bttb`g bttkhut# kotmk~ akz l~ galza# zocc zb~a tmk bdhoaopt~btl~# tm{p bcclzoaj moh

    tl nk bck~t tl tmk ultkatobc dbajk~ bp plla bp ulpponck!

    Mlakultp b~k {pkd tl hotojbtk tmk `lhubaokp ~opgp# oa tmk pkapk li tmk t~bdotolabc {pk li

    galza dkikapoyk tllcp! Zmbt doiik~katobtkp tmkh i~lh t~bdotolabc io~kzbccp l~ oat~{pola

    dktk`tola pptkhp op tmko~ b`toyk# bad alt ubppoyk# abt{~k! Ioj{~btoykc pukbgoaj# b

    mlakult op b mllg# alt b ~ktboaoaj zbcc tl bylod bttb`gp7 la tmk `lat~b~# ot pkb~`mkp il~

    p{`m bttb`gp bad katk~tboa tmkh! Hba `lhubaokp {pk ot bp ba bddkd ybc{k tl tmko~

    pk`{~ot kckhkatp# bp b `lhuckhkat tl tmko~ l~doab~ tllcp!

    @lapkr{katc# ot op ulpponck tl dktk`t bad ~k`ljaopk bttb`gp kbpoc# pl tmbt tmk `ba

    kcbnl~btk ptbtopto`p zotm tmlpk dbtb tmbt mkcu `laioj{~k tmko~ ubppoyk pk`{~ot tllcp hl~k

    kiik`toykc! Tmk pllak~ tmk hlpt bttb`gkd pk`{~ot u~lnckhp l~ tmk akz tb~jktp b~k galza#

    tmk hl~k kiik`toyk b `k~tboa `lhuba zocc nk bnck tl dkikad otpkci bjboapt tmkh!

    F{pt cogk kyk~ tllc bohkd tl kamba`k pk`{~ot# mlakultp mbyk tmko~ lza u~lp bad `lap!

    Otp j~kbtkpt {pki{cakpp cokp oa otp pohuco`ot! Poa`k tmk lac u{~ulpk li tmop hk`mbaoph op

    tmbt bttb`gk~p bttkhut tl k}uclot otp y{cak~bnocotokp# ot dlkp alt uk~il~h ba b`t{bc pk~yo`k#

    bad tmk t~biio` ubppoaj tm~l{jm ot zocc nk ~kbcc clz! Oi oa`lhoaj l~ l{tjloaj t~biio` op

    dktk`tkd oa tmk pptkh# ot zocc nk bchlpt oa bcc u~lnbnocot b tkpt# p`ba l~ bttb`g!

    Tmk t~biio` ~k`l~dkd oa p{`m b pptkh op p{puo`ol{p n abt{~k bad# tmk~kil~k# otp

    hbabjkhkat bad pt{d nk`lhkp j~kbtc pohucoiokd# kyka tml{jm# li `l{~pk# ibcpk

    ulpotoykp hb l``{~# k}u~kppola tmbt ~kyk~pkp otp hkbaoaj oa tmop `bpk!

    Zmock b ibcpk ulpotoyk {p{bcc l``{~p zmka b p{puo`ol{p b`toyot ~kjb~dkd bp bttb`g t{~ap

    l{t alt tl nk pl# oa b mlakult kayo~lahkat tmk ibcpk ulpotoyk zl{cd nk tmk `lhu{tk~(

    hbabjkd t~biio` tmbt dlkp alt ~ku~kpkat b tm~kbt! Oa tmop pohuco`ot tl {pk tmk t~biio` bad~kpl{~`kp cokp otp j~kbtkpt bdybatbjk! Tl p{h {u6 cottck oail~hbtola# n{t k}t~bl~doab~oc

    {pki{c!

    Mlakyultp# hlaotl~oaj bttb`gk~p Ubjk 0 li 22Oail~hbtola Pk`{~ot Lnpk~ybtl~

  • 8/8/2019 Honeypots Monitoring Attackers

    4/11

    Ohbjk >6 Dobj~bh li tmk cl`btola li b mlakult oa b `l~ul~btk aktzl~g

    Pl{~`k6mttu6,,zzz!mlakyd!l~j,

    Bhlaj tmk u~lnckhp zmo`m b~k cogkc tl b~opk bp b ~kp{ct li zl~goaj zotm mlakultp# zk

    `ba mojmcojmt tmk ulpponocot li ot t{~aoaj bjboapt tmk bdhoaopt~btl~! Oi ot op alt dkpojakd oa b

    `lhucktkc tml~l{jm zb# oi cllpk kadp b~k ckit {atokd# oi ot op alt `l~~k`tc oplcbtkd# tmk

    bttb`gk~ hb kykat{bcc `lhu~lhopk b ~kbc pptkh bad jkt ybc{bnck dbtb i~lh tmk

    mlakult!

    OY Clz(oatk~b`tola mlakultp

    Tmk b~k {p{bcc `~kbtkd bad hbabjkd n l~jbaopbtolap dkyltkd tl lacoak i~b{d ~kpkb~`m#

    l~ n ba ltmk~ tuk li l~jbaopbtola tmbt akkdp tl ~kpkb~`m la akz lacoak tm~kbtp! Tmk

    b~k h{`m hl~k doiio`{ct tl hbabjk bad hboatboa# bad tmk oail~hbtola tmk ~k`koyk h{pt nk

    bp k}tkapoyk bp ulpponck bad h{pt nk l~jbaopkd bad babcpkd oa l~dk~ il~ ot tl nk {pki{c!

    Jkak~bcc# tmk b~k puk`oio` pptkhp tmbt kh{cbtk pk~yo`kp# aktzl~gp# T@U dkyo`kp l~ ba

    ltmk~ kckhkat li b ~kbc pptkh# n{t zotml{t nkoaj ~kbc! Tmk~k op b hktb(pptkh nkmoad#

    oayoponck il~ tmk bttb`gk~# zmo`m op u~ktkadoaj tl nk batmoaj il~ zmo`m ot op u~lj~bhhkd tl

    nk! Tmk dl alt akkd tl nkmbyk k}b`tc cogk b pptkh l~ pk~yo`k! Tmk {p{bcc kh{cbtk b

    pk~yo`k# bad u~lyodk bapzk~p tl b pohuck p{npkt li ~kr{kptp! Il~ oaptba`k# b mlakult

    Mlakyultp# hlaotl~oaj bttb`gk~p Ubjk 4 li 22Oail~hbtola Pk`{~ot Lnpk~ybtl~

    http://www.honeyd.org/http://www.honeyd.org/
  • 8/8/2019 Honeypots Monitoring Attackers

    5/11

    poh{cbtoaj ba khboc pk~yk~ `ba u~ktkad tl nk b``kutoaj `laak`tolap bad bcclz z~otoaj ba

    khboc la tmkh# bctml{jm b`t{bcc ot zocc akyk~ nk pkat!

    Tmop tuk li mlakultp dlkp alt {p{bcc boh tl `bt`m ~kbc bttb`gk~p# n{t b{tlhbtkd tllcp!

    B m{hba nkoaj `l{cd ~buodc dktk`t zmktmk~ ot op b ~kbc pk~yk~ l~ alt# kotmk~ tmbagp tl

    mop,mk~ k}uk~oka`k l~ tl ltmk~ ikbt{~kp zmo`m hbgk moh,mk~ p{puk`t tmbt ot op alt b ~kbc

    kayo~lahkat! Mlzkyk~# b{tlhbtkd pptkhp p{`m bp b{tlhbto` k}uclotbtola plitzb~k#

    zl~hp l~ yo~{pkp# puk`obcc `~bitkd tl `b~~ l{t b `k~tboa b`tola la b pk~yo`k# zocc alt dktk`t

    batmoaj {a{p{bc! Tmk zocc dl tmko~ fln t~oaj tl k}uclot plhk y{cak~bnocot# tmk mlakult

    zocc u~ktkad tl nk k}uclotkd bad tmk mlakult bdhoaopt~btl~ zocc lntboa tmk dkpo~kd

    oail~hbtola!

    Tmop tuk li mlakultp mbp tmk u~lnckh tmbt ot op hl~k `lhuck} tl dop`lyk~ akz il~hp libttb`gp oa tmkh! Tmk b~k u~kub~kd tl poh{cbtk `k~tboa bttb`gkd pk~yo`kp bad tl ~kpulad oa

    b puk`oio` zb il~ tmk bttb`gk~ tl tmoag ot mbp b`mokykd tmko~ tb~jkt! Mlzkyk~# ot `ba akyk~

    nkmbyk oa zbp il~ zmo`m ot op alt u~lj~bhhkd# il~ oaptba`k tl poh{cbtk tmk k}uclotbtola li

    akz tukp li tm~kbtp!

    Bhlaj ltmk~ hba ulpponocotokp# tmk b~k {pkd tl jkak~btk k}uclotbtola ptbtopto`p# tl dktk`t

    bttb`g ubttk~ap bad akz hbczb~k! Tmop cbpt uloat op ub~to`{cb~c oatk~kptoaj! La hlpt

    l``bpolap# hbczb~k tbgkp bdybatbjk li y{cak~bnocotokp tl dlzaclbd iockp -yo~{pkp/ i~lh b

    pk~yk~! Oa l~dk~ tl kybdk batoyo~{p plitzb~k bad nk bp {aalto`kd bp ulpponck# tmop

    dlzaclbdkd iock op mojmc yb~obnck# bad akz yb~obatp hb buukb~ zotmoa b ikz ml{~p! B

    mlakult `ba poh{cbtk tmk k}uclotbtola li tmbt y{cak~bnocot bad bcclz tmk akz iock tl nk

    dlzaclbdkd! @lapkr{katc# b mlakult hb nk ba k}`kcckat pptkhbto` bad b{tlhbtkd

    `lcck`tl~ li akz yb~obatp li yo~{pkp bad hbczb~k oa jkak~bc!

    F{pt cogk mojm(oatk~b`tola mlakultp# tmkpk pptkhp h{pt nk yk~ zkcc u~ltk`tkd# pl tmbt

    tmk dl alt t{~a bjboapt tmk mlakult bdhoaopt~btl~! Ba bttb`gk~# kotmk~ b{tlhbtkdc l~

    hba{bcc# `l{cd plhkmlz ~kb`m tmk hktb(pptkh tmbt mlptp tmk poh{cbtkd pk~yo`k l~

    bttb`g ot!

    Tbnck 26 @lhub~opla li hboa ikbt{~kp nktzkka mlakultp

    Mojm Oatk~b`tola Clz oatk~b`tola^kbc pk~yo`kp# luk~btoaj pptkhp l~buuco`btolap

    Tmk kh{cbtk pk~yo`kp# y{cak~bnocotokp# kt`!

    Tmk ~opg tmk ~{a op mojmk~ Tmk ~opg tmk ~{a op clzk~

    Tmk `but{~k ckpp oail~hbtola# n{t hl~kybc{bnck

    Tmk `but{~k b j~kbt bhl{at li oail~hbtola!Tmk dkukad la otp `cbppoio`btola bad babcpoppptkh bad tl kybc{btk ot!

    Pl{~`k6 Yo~t{bc Mlakyultp

    Mlakyultp# hlaotl~oaj bttb`gk~p Ubjk ; li 22Oail~hbtola Pk`{~ot Lnpk~ybtl~

  • 8/8/2019 Honeypots Monitoring Attackers

    6/11

    Y Mlakhlagkp

    B mlakult `ba nk dkpojakd bp b pk~yk~ oaptkbd li bp b `lhu{tk~# o!k! bp b pptkh

    -mlakult nkmbyoaj bp b pk~yk~/ zmo`m zbotp tl nk `latb`tkd n b `cokat -`lhu{tk~/! Poa`klak li tmk tb~jktp li b mlakult op tl jbtmk~ oail~hbtola la bttb`gp# b puk`oio` `la`kut li b

    `cokat mlakult tmbt dlkp alt zbot tl nk bttb`gkd# n{t jkak~btkp bttb`gp b`toykc#

    buukb~kd! Tmkpk b~k galza bp mlakhlagkp!

    Poa`k pkyk~bc kb~p bjl# tmk hlpt {pkd bttb`g yk`tl~ oa tmk Oatk~akt op tmk n~lzpk~!

    Pk`{~ot hkbp{~kp mbyk nkka kamba`kd bad ot op oa`~kbpoajc doiio`{ct tl k}uclot

    y{cak~bnocotokp oa kck`t~lao` hboc `cokatp u~lj~bhp(# zmo`m zbp tmk hlpt {pkd bttb`g

    yk`tl~ nkil~k! Oa bddotola# tmk zodkpu~kbd {pk li io~kzbccp hbdk ot kyka hl~k `lhuco`btkd

    il~ bttb`gk~p tl k}uclot y{cak~bnocotokp oa tmk luk~btoaj pptkh! Tmk~kil~k# bp pk~yo`kp

    -il~{hp# `mbtp# kt`!/ zk~k hlykd tl tmk zkn# tmk n~lzpk~ nk`bhk tmk ibyl{~otk tb~jkt il~

    bttb`gk~p! N f{pt yopotoaj b zknpotk# ot op ulpponck tl k}uclot bcc tukp li y{cak~bnocotokp

    k}optoaj oa tmk n~lzpk~ oa l~dk~ tl k}k`{tk `ldk la tmk `cokat ba oaik`t ot!

    Mlakhlagkp khk~jk nkmoad tmop `la`kut! Otp hboa i{a`tola# f{pt cogk mlakultp# op tl

    dktk`t akz tukp li bttb`gp bad oaik`tola hktmldp# bad# cogk mlakultp# tmk `lapopt li b

    p`baaoaj hld{ck bad b dbtb(jbtmk~oaj hld{ck! Bp il~ tmk `bpk li mlakhlagkp#

    mlzkyk~# tmk p`baaoaj op b`toykc uk~il~hkd tm~l{jm n~lzpk~p! B mlakhlagk zl~gp bp

    ba b{tlhbto` n~lzpoaj pptkh yopotoaj bcc goad li zknpotkp oa l~dk~ il~ plhk li tmkh tl

    bttkhut tl k}uclot y{cak~bnocotokp oa tmk n~lzpk~! Tmk mbyk b h{`m hl~k b`toyk abt{~k

    tmba tmbt li tmk mlakult# oa tmk pkapk tmbt tmk ubt~lc tmk aktzl~g bp oi tmk zk~k b {pk~

    `lhu{cpoykc yopotoaj zknpotk coagp!

    Ot zbp Ho`~lplit tmbt abhkd tmkh bp Hlagkp! Ot ~kik~p tl tmk f{hup bad dabhoph oa

    tmk tuk li b`tolap tmk uk~il~hkd! Zotm tmop hktmld# f{pt cogk mlakultp# akz k}uclotp#

    zl~hp# kt`! `ba nk il{ad# bp claj bp bcc tmk `lcck`tkd oail~hbtola op buu~lu~obtkc

    babcpkd bad u~l`kppkd!

    Mlakyultp# hlaotl~oaj bttb`gk~p Ubjk 9 li 22Oail~hbtola Pk`{~ot Lnpk~ybtl~

  • 8/8/2019 Honeypots Monitoring Attackers

    7/11

    Ohbjk 06 Ho`~lplit Mlakhlagk Dobj~bh

    Pl{~`k6 ~kpkb~`m!ho`~lplit!`lh

    YO Mlakultp mlakaktp

    Tmk boh li mlakaktp op# f{pt cogk tmbt li mlakultp# tl k}bhoak tmk tk`maor{kp bad tllcp

    {pkd n bttb`gk~p oa tmk Oatk~akt! Tmko~ nbpo` doiik~ka`k i~lh mlakultp op tmbt tmk dl alt

    `lapopt li lac lak `lhu{tk~# n{t h{ctouck pptkhp bad buuco`btolap kh{cbtoaj hba

    ltmk~p# u~ktkadoaj tl nk y{cak~bnocotokp l~ galza pk~yo`kp l~ `~kbtoaj `bjk kayo~lahkatp

    zmk~k ot op ulpponck b nkttk~ lnpk~ybtola bad babcpop li bttb`gp! Tmk nbpo` bad

    oadopukapbnck ~kr{o~khkatp tl `lapt~{`t b mlakakt b~k tzl6 tmk pl(`bcckd Dbtb @lat~lc

    bad Dbtb @but{~k!

    Dbtb @lat~lc

    Tmk `b~~ l{t tmk `lat~lcckd ~kpt~boat li oail~hbtola bad `laak`tolap! Dkbcoaj zotm

    bttb`gk~p bczbp katbocp b ~opg zmo`m akkdp tl nk hoaohopkd bp h{`m bp ulpponck bad#

    tmk~kil~k# ot op kppkatobc tl hbgk p{~k tmbt# la`k tmk mlakult op `lhu~lhopkd# ckjotohbtk

    pptkhp zocc alt nk `lhu~lhopkd!

    Tmk `mbcckajk cokp oa hboatboaoaj ba bnplc{tk `lat~lc li tmk dbtb iclz zotml{t tmk bttb`gk~

    alto`oaj ot! Ot op alt ulpponck tl `clpk b pptkh `lhucktkc oa l~dk~ tl bylod {aak`kppb~t~biio`!

    Mlakyultp# hlaotl~oaj bttb`gk~p Ubjk : li 22Oail~hbtola Pk`{~ot Lnpk~ybtl~

  • 8/8/2019 Honeypots Monitoring Attackers

    8/11

    La`k tmk pptkh op `lhu~lhopkd# tmk bttb`gk~ zocc bttkhut tl hbgk doiik~kat tukp li

    `laak`tolap tl `latoa{k zotm tmko~ bttb`g# u~lnbnc akkdoaj tl dlzaclbd plitzb~k

    u~lj~bhp tm~l{jm ITU# khbocp l~ PPM `laak`tolap! Oi tmk b~k alt bcclzkd tmop ick}onocot

    li b`tola# bub~t i~lh b~l{poaj p{puo`olap# ot zocc alt nk ulpponck tl babcpk i{~tmk~

    ohul~tbat ptkup zmo`m `l{cd nk zl~tm babcpoaj!

    Oa tmk io~pt bttkhutp li ~kpkb~`mk~p tl ptb~t mlakakt u~lfk`tp# al tuk li l{tjloaj

    `laak`tolap zk~k uk~hottkd# oa l~dk~ il~ tmkh alt tl nk`lhk ucbtil~hp il~ akz bttb`gp!

    N{t ot tllg bttb`gk~p lac b ikz hoa{tkp tl alto`k tmbt plhktmoaj zbp z~laj bad joyk {u

    tmk bttkhut li bttb`g7 tmk ~kp{ctp zk~k `lapkr{katc yk~ ull~!

    B `la`c{pola# zmo`m p{hhb~opkp tmk b~t li `lapt~{`toaj b {pki{c mlakakt# `ba nk d~bza

    i~lh tmop pot{btola6 ot op ak`kppb~ tl ioad tmk bdkr{btk nbcba`k nktzkka i~kkdlh li b`tolail~ bttb`gk~p# zmo`m katbocp b j~kbtk~ ~opg# bad b`t{bc pk`{~ot li tmk pptkh# zmo`m hb

    ckbd tl ckpp oatk~kptoaj ~kp{ctp il~ tmk pt{d!

    Dbtb @but{~k

    Tmop op tmk t~b`goaj bad ptl~bjk li tmk oail~hbtola pl{jmt# o!k! cljp -dbtb ~kjopt~okp/ li tmko~

    b`tolap# zmo`m zocc nk babcpkd b p{npkr{katc! Ot op ak`kppb~ tl jbtmk~ bp h{`m

    oail~hbtola oplcbtkd i~lh tmk ckjotohbtk t~biio` bp ulpponck# tm{p u~kykatoaj tmk bttb`gk~

    i~lh galzoaj tmko~ b`tolap b~k nkoaj `but{~kd! Oa l~dk~ tl b`mokyk tmop# ot op kppkatobc tl

    bylod tmk cl`bc ptl~bjk li ~kp{ctp oa tmk mlakult# poa`k tmk `ba nk ultkatobcc dktk`tkd

    bad k~bpkd zotm tmk cljo`bc u{~ulpk li alt ckbyoaj ba t~b`k li tmk bttb`g! Tmk oail~hbtola

    h{pt nk ptl~kd ~khltkc bad oa cbk~p! Ot `baalt nk cohotkd tl ~kjoptk~oaj b pohuck cbk~ li

    oail~hbtola# n{t ot bcpl `lcck`tp ot i~lh tmk zodkpt ulpponck ~bajk li ~kpl{~`kp! N

    `lhnoaoaj bcc `lhu{tk~p bad dbtb cbk~p tljktmk~ tmk dkpo~kd oail~hbtola tbnck zocc nk

    il~hkd!

    Yo~t{bc tllcp

    Tmk tllcp tl n{ocd b mlakult l~ mlakakt b~k mojmc yb~okd# n{t tmk hlpt {pkd hktmld optmk {pk li umpo`bc l~ yo~t{bc hb`moakp tl n{ocd tmk mlakult!

    Joyka tmk ultkatobc dbajk~ li {poaj mlakultp# bad d{k tl otp yk~ abt{~k# tmk {pk li

    yo~t{bc tllcp op mojmc ~k`lhhkadkd bad op zodkc b``kutkd! Tmk bdybatbjkp li b yo~t{bc

    pptkh lyk~ b umpo`bc lak b~k lnyol{p6

    Tmk `ba nk io}kd zotmoa b ikz hoa{tkp oa tmk kykat li ba b``odkat# dopbptk~#

    l~ `lhu~lhopk6 hlpt yo~t{bc pptkhp uk~hot {pk~p tl ptl~k ba odkbc ptbtk bad

    ~kt{~a tl ot bt ba tohk oa b h{`m hl~k ~buod zb tmba oi b umpo`bc pptkh mbd tl

    nk ~kubo~kd bad ~kt{~akd tl b u~kyol{p ptbtk!

    Mlakyultp# hlaotl~oaj bttb`gk~p Ubjk = li 22Oail~hbtola Pk`{~ot Lnpk~ybtl~

  • 8/8/2019 Honeypots Monitoring Attackers

    9/11

    Tmk `ba nk `b~~okd tl doiik~kat umpo`bc hb`moakp mlptoaj tmkh6 tmk yo~t{bc

    pptkhp# n dkioaotola# b~k k}k`{tkd oa ba umpo`bc hb`moak oa ba odkato`bc zb#

    kh{cbtoaj tm~l{jm b plitzb~k u~lj~bh tmk ~kr{o~kd kayo~lahkat oa l~dk~ tl nk bnck

    tl ~ku~ld{`k tmk yo~t{bc pptkh!

    Tmk bcclz pbyoaj `lptp6 b poajck umpo`bc hb`moak `ba mlpt ba oadkioaotk

    a{hnk~ li yo~t{bc hb`moakp# bp hba bp bcclzkd n otp ~kpl{~`kp# bad zotm bp

    hba luk~btoaj pptkhp bp dkpo~kd!

    Tmk hboa yo~t{bc tllcp {pkd oa mlakultp b~k6

    YHzb~k6 ot op tmk hlpt zkcc(galza bad {pkd yo~t{bcovbtola pptkh! Ot `ba poh{cbtk

    hb`moakp k}k`{toaj ba luk~btoaj pptkh bad la ba luk~btoaj pptkh! Hba litmk yo~t{bcovbtola {tocotokp b~k liik~kd i~kkc# p{`m bp YHZb~k Ucbk~

    Yo~t{bcNl}6 ot op b i~kk bad luka pl{~`k P{a U~lfk`t! F{pt cogk YHZb~k# ot `ba

    poh{cbtk hb`moakp k}k`{toaj ba luk~btoaj pptkh bad la ba luk~btoaj pptkh!

    Ohbjk 46 ]U yo~t{bc hb`moak ~{aaoaj oa Zoadlz Yoptb zotm Yo~t{bcNl}

    Pl{~`k6 OATK@L

    Mlakyultp# hlaotl~oaj bttb`gk~p Ubjk ? li 22Oail~hbtola Pk`{~ot Lnpk~ybtl~

  • 8/8/2019 Honeypots Monitoring Attackers

    10/11

    Rkh{6 luka pl{~`k u~lfk`t tmbt `ba nk {pkd nltm bp yo~t{bcovk~ bad kh{cbtl~! Ot op

    lac bybocbnck il~ Coa{} kayo~lahkatp! Ot op hl~k doiio`{ct tl {pk tmba YHZb~k!

    [pk~(Hldk Coa{}6 ot op b zb li poh{cbtoaj b yo~t{bc Coa{} gk~akc bp tml{jm ot

    zk~k b u~l`kpp! Ot `ba lac nk k}k`{tkd i~lh b Coa{} pptkh bad lac poh{cbtkp

    baltmk~ gk~akc# n{t ot op ~kbcc {pki{c tl ptb~t b mlakult!

    YOO Mlakult k}bhuckp

    Tmk~k b~k ikz `lhhk~`obc tllcp `lyk~oaj tmk mlakult hb~gkt7 mlzkyk~# oa tmk zl~cd li

    luka pl{~`k tllcp# hba {tocotokp b~k u~lyodkd tmbt `ba b`t bp mlakultp# nltm il~

    `lhubaokp bad {pk~p6

    Lak li tmk hlpt zkcc(galza Mlakultp op Puk`tk~!

    Ohbjk ;6 Puk`tk~ @laplck# tmk hlpt zkcc(galza `lhhk~`obc mlakult il~ Zoadlzp

    Pl{~`k6 puk`tk~!`lh

    Ot op `bubnck li poh{cbtoaj {u tl 24 doiik~kat luk~btoaj pptkhp# ~{aaoaj oa Zoadlzp LP!

    Otp hboa btt~b`tola op otp kbpk li {pk!

    GIPkapl~ op baltmk~ `lhhk~`obc mlakult b`toaj bp b mlakult bad ODP il~ Zoadlzpluk~btoaj pptkhp!

    Mlakyultp# hlaotl~oaj bttb`gk~p Ubjk 25 li 22Oail~hbtola Pk`{~ot Lnpk~ybtl~

  • 8/8/2019 Honeypots Monitoring Attackers

    11/11

    Mlakyultp# hlaotl~oaj bttb`gk~p Ubjk 22 li 22

    Oa tmk zl~cd li luka pl{~`k tllcp# ot op ulpponck tl ioad a{hk~l{p k}bhuckp li Mlakultp

    `lyk~oaj bcc bpuk`tp li tmkpk tllcp6

    N{nnckj{h U~l}ult# Fb`gult# Nb`gLiio`k~ I~okadc# Nojkk! MlakZkn# Dk`kutola

    Tllcgot# CbN~kb Tb~uot# Mlakd# Pkadhboc PUBH T~bu# kt`!

    Ohbjk 96 Dk`kutola Tllcgot @laplck

    Pl{~`k6 Dk`kutola Tllcgot

    Oail~hbtola Pk`{~ot Lnpk~ybtl~