Design & Implementation of Honeyd to Simulate Virtual Honeypots
Vivek Sharma · IOSR Journal of Computer Engineering · 2012
Honeyd is an application which enables the setup of multiple virtual honeypots on a single machine, each with different characteristics and services.It is a nice little tool which can be perfectly used to setup a low to mid involvement honeypot.The possibility to generate different virtual honeypots on one machine with even different simulated operating systems enhances the usability of this tool even further.It's great for simulating victims and collecting a lot of interesting information.Honeyd could be used as an early warning system in a productive environment to catch some attacks and trigger an alert.Finding infected web or MS SQL servers can be achieved.The mechanism of attaching a script to a certain port allows a very flexible setup with unlimited capabilities and opportunities for tuning.Finally, the logs generated as well as attacks came on virtual systems can be analyzed graphically using scripts and configuration files.