Security+5e Lab15-2: Using HoneyBOT
A honeypot is a computer typically located in an area with limited security and loaded with software and data files that appear to be authentic, but are actually imitations of real data files. The honeypot is intentionally configured with security vulnerabilities so that it is open to attacks. HoneyBOT operates by opening a range of listening sockets on a computer. These sockets are designed to mimic vulnerable services. If attackers attempt to connect to one of these services, they believe they are attacking a real server. The honeypot safely and securely captures all communications with the attackers and the results are logged for future reference and analysis. What's more, if the attackers attempt an exploit or upload a rootkit, trojan, or other malware to the server, the honeypot environment can safely quarantine these files on the computer for analysis. In this lab, we'll install HoneyBOT and explore some of its features.