Build honeypot in my network?

[Genna]

I have purchased a laptop of Samsung since few weeks ago and I have connected an internet service provider of MTNL the MTNL is the leading internet service provider in Mumbai. I think so that it provides up to 4 Mbps of speed. And I think this is the fastest speed that I ever have. I have a problem that is I want to log the IP’s connecting the computer and I want to monitor the port scanning and Arp spoofing to do this I am interested in building the honey-pot in my network. Is there any guide or any software from where I can download or I can build the honey-pot? Please help me in solving the problem. Thanking all in advanced for helping me and giving me your precious time.

[teenQ]

I would like to recommend you that honey pot means the trap to detect or deflect the unauthorized use of the information system. I think that you should use the ax3soft sax2 I think that these are the intrusion detection system or the intrusion detection or prevention system. This system is used to detect the intrusion that is occurred in the network while somebody is using your network or messing with your network and then honey-pot will distract the user from your network. The intrusion detection system or the intrusion prevention system detects the SQL inject attacks, worms, backdoor Trojan and the password guessing and so on. I hope that this will help you to understand the problem.

[Visala28]

I would like to recommend you that there are different types of approach to build a honey-pot. The honey pot which I build was very simple. But I think that you can build it on the Linux based system or you can make it in the Solaris, NT, or I think in any other operating system. Don’t do anything special to build the honey-pot just built the honey-pot and then put the system on the internet and wait for a while. Or I think that somebody will find the system and then attack the system you build. However when they are gaining root to the ADMIN then I think that you are tracking the every move of the user. I hope that this will help you to solve the problem.

[Sabastiaan]

I would like to recommend you that there are many approaches to build honey-pot. But I think for the networking basis a product called the CyberCop Sting, This product is designed to run on the operating system of NT. I would like to recommend you the name of the developer of the deception toolkit and the name is Fred Cohen this developer developed the variety of tools. I like the tool named BANKOFFICER FRIENDLY this is the tool which is used in the bank office. All these have their advantage. I hope that this will solve your problem.

[Candace]

I would like to recommend you that honey pot means the trap to detect or deflect the unauthorized use of the information system. I would like to recommend you that this type of honey-pot is known as the low-interaction honey-pot. I think so that this type of interaction is easy to build and maintain. But in this situation I think that the administrator needs to ensure the patch management on the host system because to prevent the system from being fully exploited by the hackers. I think so that the low interaction honey-pot has low risk. I hope that this will help you to solve the problem.

[Lemog]

I would like to recommend you that another type of the honey-pot is the medium-interaction honey-pot. I think because of the medium interaction I think that this will be more advanced than the low-interaction honey-pot. I would like to suggest one important note is that the medium-interaction honey-pot does not have any real operating system. But I think so that the bogus service providers are the more sophisticated. I hope that this will help you to understand the honey-pot problem.

[addie]

I would like to recommend you that the most advanced type of the honey-pot is the high-interaction honey-pot. I would like to suggest one important point is that the high-interaction honey pot is the most time-consuming and easy to maintain, develop, and manage. I think that this high-interaction honey-pot possess a huge risk. But in this case the information gathered for analysis are bountiful. I think so that the goal of high interaction is to give the attacker access to the real operating system where you will get nothing emulated and restricted.

[Pabloa]

While I was surfing on the internet I saw the topic and the suggestion given to you the suggestions are quite systematic and recently I was also suffering from the same problem that you are suffering now but I am wondering that now the problem has been solved because for you if no then you have to search on the Google for your exact suggestion or you will also get the videos on the Google. I hope that this will help you in solving the problem and giving you the correct suggestion.