Take hackers to an area you define IT and security professionals, along with management across organizations, want greater recourse against attackers. They question the wisdom of devoting resources to entrapping hackers instead of merely repelling their attacks. Although firewalls are effective, given enough time, a determined attacker can defeat the barrier approach to security. A covert-monitoring component can be a very effective addition to a security solution. This covert approach provides organizations time to better understand the hackers' approach, identify security improvements, and learn more effective response techniques.
Companies take the initiative rather than being forced to react after the attack.
Amoroso describes gathering intrusion-related information as key to protecting your network. The information gathering aspect of the covert approach has proved to be a successful security measure in many real-Iife scenarios. In an attempt to get a copy of a password file, the hacker, Berferd, was led to a decoy or trap where his behavior was observed over several days. We wanted to watch the cracker's keystrokes, to trace him, learn his techniques and warn his victims. The best solution was to lure him to a sacrificial machine and tap the connection.