Also, by having different systems with different services, such as a Linux DNS server, a Windows NT webserver, and a Solaris FTP server, we can learn about different tools and tactics. Perhaps certain blackhats target specific systems, applications, or vulnerabilities. By having a variety of operating systems and applications, we are able to accurately profile specific blackhat trends and signatures. All systems placed within the Honeynet are standard production systems. These are real systems and applications, the same you find on the Internet.
Nothing is emulated nor is anything done to make the systems less secure.
The risks and vulnerabilities discovered within a Honeynet are the same that exist in many organizations today. One can simply take a system from a production environment and place it within the Honeynet. It is the fact that production systems are used that make a Honeynet unique. Because we use the most common operating systems, the risks and vulnerabilities discovered in our research apply to the largest percentage of the Internet community. Value of a Honeynet Traditionally, information security has been purely defensive.