Also, by having different systems with different services, such as a Linux DNS server, a Windows NT webserver, or a Solaris FTP server, we can learn about different tools and tactics. Perhaps certain blackhats target specific system or vulnerabilities. By having numerous different systems, we are more likely to discover these differences. All systems placed within the Honeynet are standard production systems. These are real systems and applications, the same you find on the Internet.
Nothing is emulated nor is anything done to make the systems more insecure.
The risks and vulnerabilities discovered within a Honeynet are the same that exist in many organizations today. If designed well, the Honeynet is harder to detect because it uses standard operating systems and filters network traffic in a conservative manner. Absolutely nothing, that is the scary part. The Honeynet Project merely puts systems on a dedicated Internet connection and sits back and wait. The blackhat community is extremely aggressive, you would be surprised at what they will find.