Tuesday, March 07, 2006

Survey of Trends in Honeypot Technology Users

As honeypot and honeynet technologies continue to mature, it is important for the security community to understand what honeypot user’s need are, and what level of abilities they have with technologies. When the security community understands these needs and abilities, they may better serve new technology and service solutions to honeypot users. A survey was conducted among the SecurityFocus.com Honeypot mailing list to ascertain the level of expertise in several honeypot technologies and the types of technologies that were being used “out in the field”. The results show that most users are interested in new bleeding-edge technologies, and that they run a few honeypots to mimic production systems for their own personal interest to see what kind of malicious traffic may be entering their network(s).