Honeypot
Subtitle: a new paradigm to information security
By: R.C. Joshi, Anjali Sardana
Contributors: Sardana, Anjali
Publisher: Science Publishers; Distributed by CRC Press
Published: 2011
Place of publication: Enfield, N.H; Boca Raton, FL
Language: eng
Number of pages: 328
ISBN-13: 9781578087082
Subjects: Computer hackers; Computer security; Wireless communication systems; Computer networks; Security measures; Firewalls (Computer security)
Notes: Includes bibliographical references and index.
Table of contents: title: Machine generated contents note: 1.Honeypots; title: 1.1.Background; title: 1.1.1.History and Evolution of Honeypots; title: 1.2.Honeypots; title: 1.2.1.Generic Honeypot Model; title: 1.3.Honeypots vs. Firewalls and Intrusion Detection Systems; title: 1.3.1.Firewalls; title: 1.3.2.Intrusion Detection Systems; title: 1.3.3.Honeypots; title: 1.4.Classification of Honeypots; title: 1.4.1.Based on Usage; title: 1.4.2.Based on Level of Interaction; title: 1.4.3.Based on Hardware Deployment Type; title: 1.4.4.Based on Role of Honeypot; title: 1.5.Placement of Honeypots; title: 1.5.1.External Placement; title: 1.5.2.Internal Placement; title: 1.5.3.DMZ Placement; title: 1.5.4.On the Whole; title: 1.6.Varieties of Honeypots: Honeytokens, Honeypages, Honeynets and Honeyfarms; title: 1.6.1.Honeytokens; title: 1.6.2.Honeypages; title: 1.6.3.Honeynets; title: 1.6.4.Honeyfarms; title: 1.7.Value of Honeypots'; title: 1.7.1.Low False-Positives; title: 1.7.2.Early Detection; title: 1.7.3.New Threat Detection; title: 1.7.4.Defense in Depth; title: 1.7.5.Other Advantages of Honeypots; title: 1.8.Risks and Tradeoffs; title: 1.9.Key Issues and Challenges; title: 1.10.Summary; title: Exercises; title: References; title: 2.Commercially Available Honeypots; title: 2.1.Back Officer Friendly; title: 2.2.Specter; title: 2.3.Mantrap; title: 2.4.Honeyd; title: 2.5.Summary; title: Exercises; title: References; title: 3.Honeynets; title: 3.1.Overview of Honeynets; title: 3.2.Value of Honeynets; title: 3.2.1.Methods, Motives, and Evolving Tools; title: 3.2.2.Trend Analysis; title: 3.2.3.Incident Response; title: 3.2.4.Testbed; title: 3.3.Working of Honeynet; title: 3.3.1.Controlling Data; title: 3.3.2.Capturing Data; title: 3.3.3.Collecting Data; title: 3.4.Honeynet Architectures; title: 3.4.1.Gen I; title: 3.4.2.Gen II; title: 3.5.Sweetening the Honeynets; title: 3.6.Risks Associated with Honeynets; title: 3.7.Summary; title: Exercises; title: References; title: 4.Attacks and Role of Honeypots; title: 4.1.Phases of Attack and Honeypots; title: 4.1.1.Prevention; title: 4.1.2.Detection; title: 4.1.3.Response; title: 4.1.4.Research; title: 4.2.Worms and Virus Attacks; title: 4.2.1.Worms; title: 4.2.2.Virus Attacks; title: 4.3.Spam and Phishing Mails; title: 4.3.1.Spams; title: 4.3.2.Phishing; title: 4.4.Distributed Denial of Service Attacks; title: 4.5.Summary; title: Exercises; title: References; title: 5.Static Honeypots; title: 5.1.Honeypot as Detection Systems; title: 5.1.1.Japonica: Objectives and Requirements; title: 5.1.2.Framework and Components; title: 5.2.Honeypot as Deception Systems; title: 5.3.Summary; title: Exercises; title: References; title: 6.Virtual Honeypots; title: 6.1.Virtual Honeypot: VMware Workstation; title: 6.2.Data Capture on Virtual Honeypots; title: 6.3.Raw Disks and Virtual Disks; title: 6.4.Virtual Honeynet; title: 6.5.Case Study; title: 6.6.Summary; title: Exercises; title: References; title: 7.Dynamic Honeypots; title: 7.1.Issues with Static Honeypots; title: 7.2.Dynamic Honeypots; title: 7.3.Dynamic Honeypot Design; title: 7.3.1.Proposed Design Overview; title: 7.3.2.Active Probing; title: 7.3.3.Passive Fingerprinting; title: 7.3.4.Honeyd; title: 7.3.5.The Database; title: 7.3.6.Dynamic Honeypot Engine; title: 7.4.Dynamic Honeypot Construction; title: 7.4.1.Graphic User Interface; title: 7.5.Benefits; title: 7.6.Summary; title: Exercises; title: References; title: 8.Wireless Honeypots; title: 8.1.Introduction to Wireless Local Area Networks; title: 8.2.Basic Wireless Concepts; title: 8.2.1.Stations and APs; title: 8.2.2.Infrastructure and Ad Hoc Modes; title: 8.2.3.Frames; title: 8.2.4.Authentication; title: 8.2.5.Association; title: 8.3.802.11 Security; title: 8.3.1.Access Control List; title: 8.3.2.WEP (Wired Equivalent Privacy); title: 8.3.3.WPA (Wi-Fi Protected Access); title: 8.3.4.802.11i; title: 8.4.Wireless Attacks: From A Blackhat's Perspective; title: 8.4.1.Passive Attacks on Wireless Networks; title: 8.4.2.Active Attacks on Wireless Networks; title: 8.4.3.Man-in-the-Middle Attacks on Wireless Networks; title: 8.4.4.Jamming Attacks on Wireless Networks; title: 8.4.5.Some other Attacks; title: 8.5.Wireless Honeypots; title: 8.5.1.Needs and Goals of Wireless Honeypots; title: 8.5.2.Wireless Honeypot History; title: 8.5.3.Theory and Design; title: 8.5.4.Wireless Activity; title: 8.5.5.Wireless Architectures; title: 8.5.6.Some Practical examples to create Honeypots; title: 8.5.7.Existing Wireless Architectures on Wireless Honeypots; title: 8.5.8.Wireless Tools; title: 8.5.9.Wireless Honeypot using Wired Tools; title: 8.6.Limitations; title: 8.7.Summary; title: Exercises; title: References; title: 9.Applications of Honeypots; title: 9.1.Defense against Automated Attacks; title: 9.2.Protection against Human Intruders; title: 9.3.Surgical Detection Methods; title: 9.4.Cyber-Forensics; title: 9.5.Network Surveillance; title: 9.6.Forensic Analysis; title: 9.7.Tactical Battlefield; title: 9.8.Use as Deterrent; title: 9.9.Research Purpose; title: 9.10.Summary; title: Exercises; title: References; title: 10.Anti-Honeypot Technology; title: 10.1.Network Issues; title: 10.1.1.Honeypot and Fingerprinting: Practical Examples; title: 10.2.System Issues; title: 10.3.Techniques For Honeypot Detection; title: 10.3.1.Honeypot Hunters; title: 10.3.2.Honeypot Detection in Advanced Botnet Attacks; title: 10.3.3.Mapping Internet Sensors With Probe Response Attacks; title: 10.4.Countermeasure for Detection of Honeypot Deployment; title: 10.4.1.The Honeyanole System; title: 10.4.2.A Hybrid Honeypot Architecture for Scalable Network Monitoring; title: 10.5.Summary; title: Exercises; title: References; title: 11.Honeypots and Network Forensics; title: 11.1.Network Forensics; title: 11.1.1.Classification of Network Forensics Systems; title: 11.1.2.Motivation for Network Forensics; title: 11.1.3.Honeypot approaches for Network Forensics; title: 11.2.Honeypot as Network Forensic Analysis Tools; title: 11.3.Honeypot Based Network Forensics Frameworks; title: 11.3.1.Generic Process Model; title: 11.3.2.Honeypot Based Frameworks for Forensics; title: 11.4.Summary; title: Exercises; title: References.