Network Honeypot

Attack Honeypot

Analyse, Forensics, Act

Before an attack, attackers typically run reconnaissance on your network to find weaknesses.

Deploying a honeypot along side your actual network and web services, host and posts fake web services that allow you to identify to potential attackers and gather intelligence as legal forensic evidence, and to adapt your security posture accordingly.

Analysis and Forensics

Perform analytics on all activity captured in the honeypot, including successful logins to the system, observed successful attacks, and attempted/successful malware activity on the host.

Compromised Accounts
Identity theft (through techniques like phising, key-logging, traffic sniffing, spoofing, to name a few) is one of the prevalent criminal activities used for online fraud. Attackers exploit valid user credentials to gain unrestricted access to the corporate network. Organisations need an effective means of monitoring for insecure accounts and passwords to prevent credentials from being continually compromised.

Honeypots monitor for successful and unsuccessful logon attempts to honeypot servers, capturing details on the username and password. This allows analysts to see commonly attempted username and password combinations.

By knowing which accounts are being targeted by hackers and which passwords are vulnerable to exploit in the honeypot, organisations are able to strategically increase defense measures within their network by monitoring at risk user accounts and enforcing stricter password policies.

Security Training

With security professionals still in short supply, by using honeypots to watch the attackers actions, the defenders can learn about the latest techniques. A lot of security teams, when they start deploying honeypots, really start understanding how these attackers work - they see the steps the attackers takes, but also figure out how to stop the intermediary steps in their own network.

P: +44(0)7714 209927

S: +44(0)1273 329753

info@securenetconsulting.co.uk