Honeypots for Windows

✍ Scribed by Roger A. Grimes (auth.)

• Publisher: Apress
• Year: 2005
• Tongue: English
• Leaves: 406
• Edition: 1
• Category: Library

✦ Synopsis

Installing a honeypot inside your network as an early warning system can significantly improve your security. Currently, almost every book and resource about honeypots comes from a Unix background, which leaves Windows administrators still grasping for help. But Honeypots for Windows is a forensic journeyhelping you set up the physical layer, design your honeypot, and perform malware code analysis.

You'll discover which Windows ports need to be open on your honeypot to fool those malicious hackers, and you'll learn about numerous open source tools imported from the Unix world. Install a honeypot on your DMZ or at home and watch the exploits roll in! Your honeypot will capture waves of automated exploits, and youll learn how to defend the computer assets under your control.

✦ Table of Contents

Front Matter....Pages i-xxv
Front Matter....Pages 1-1
An Introduction to Honeypots....Pages 3-34
A Honeypot Deployment Plan....Pages 35-59
Front Matter....Pages 61-61
Windows Honeypot Modeling....Pages 63-88
Windows Honeypot Deployment....Pages 89-120
Honeyd Installation....Pages 121-149
Honeyd Configuration....Pages 151-166
Honeyd Service Scripts....Pages 167-188
Other Windows-Based Honeypots....Pages 189-220
Front Matter....Pages 221-221
Network Traffic Analysis....Pages 223-268
Honeypot Monitoring....Pages 269-300
Honeypot Data Analysis....Pages 301-336
Malware Code Analysis....Pages 337-361
Back Matter....Pages 363-392

✦ Subjects

Data Encryption