Second-generation (GenII) honeypots
Bojan Ždrnja · 2004
Honeypots are security resources which trap malicious activities, so they can be analyzed and monitored. During the last couple of years they have become a very important part of the security assets of an organization. Evolution of honeypots led to GenII honeypots which, compared to plain GenI honeypots, allow improved and flexible data control, and capture. Data control prevents attackers from using a compromised honeypot system to attack other external computer systems. Capturing data allows the honeypot administrator to examine in detail all information regarding activities on the honeypot system. This paper gives an introduction to the architecture and usage of GenII honeypots, their features and possibilities for future development.