1)would splitting the internet connection via router, then hardware firewall, then honeypot, be considered "over kill" and would simply connecting the honeypot to the internet via wireless router (that other computers connect to the internet through but are NOT connected to each other through) be "under kill"
2)how do you log the data and then keep it safe from the attacker modifying or destroying it (after all what is the point of the honeypot if its logs get trashed)
This post has been edited by itachis.eyes: 15 October 2009 - 11:21 AM



Help
Back to top








