Question

in your own words: Discuss, in a minimum of 100 words, the potential benefits and drawbacks of using honeypots on a network. Consider if the use of a honeypot may inadvertently give an attacker a critical piece of information about a network, and whether such a risk outweighs the advantages.

Answer 1

Honeypots:

Honeypots are interesting since they permit a security analyst to see and record what activities a malicious user takes on a compromised computer without necessarily interfering or revealing to the attacker that they are being observed. Since of this invisibility, important insights can be accumulated almost the actual strategies of an attacker. A honeypot can be designed to be either proactive or responsive to attacks, depending on the requirements of the individual who set it up.

Advantages:

There are many benefits that a company can essentially get out of designing a honeypot inside their framework. Whereas there are many solutions to security issues that are available within the computer program market, honeypots still have interesting benefits and really useful purposes. The benefits may well be summarized in the following points:

• Any attacks may well be effectively captured using honeypots. Also, data around the attack type may be recognized such that shortcoming focuses gotten to be well known to the security administrators. This may be found utilizing the logs which are made by a honeypot.
• Administrators become essentially familiar with new threats and cutting edge strategies of attacks. They take notice of the new attacks and assist pick up information of how to guard a system against these attacks.
• When a honeypot captures traffic, it does not capture the complete activity such that it gets to be bulky and tedious to analyze and examine through its captured traffic. On the other hand, it only takes care of the approaching malicious activity and informs the network administrator of it.
• From the above-mentioned point where we talked about that as it were malicious traffic gets captured by a honeypot, there's no require for a gigantic sum of storage at all. In practice, any devoted computer may gotten to be the honeypot system without an critical got to purchase numerous more assets and distribute budget to convey the honeypot technology inside an organization.
• The configuration of honeypots is very simple and deploying it does not have any complications. This is often complemented with a basic algorithm that does not have any complexity.

Disadvantages:

• Everything in life has advantages and drawbacks, and we need to discover the balance between them . In reality, there are a few points that may be considered as pitfalls for utilizing honeypots in common.
• Information is only gathered when attack is performed. On the other hand, in case there's no attack occurring on the network, at that point there will be no gathered information at all.
• The captured malicious activity is only collected when the attack is focused on at the honeypot machine. In any case, in the event that the target of the attack was another machine instead of the honeypot machine, at that point we are in truly big trouble.
• Honeypots are sometimes recognizable from other real systems that we have in our network. Of course, typically a enormous issue that can be handled such that indeed experienced programmers cannot recognize between honeypot systems and real systems utilizing fingerprinting.

---------------------------------------------------------------------------------------------------------------------------------------------------------------

A really undesirable result is that a not careful organization may end up having lies truly within the fact that an attacker may depend on a honeypot and abuse it as a zombie to attack other frameworks inside the network and get them compromised, causing truly huge trouble for the complete organization.

Once the honeypot is accessed, it may be utilized as a launchpad for forthcoming attacks. Those attacks may be conducted on an internal system or on another company. Honeypots, hence introduce risk. There's subsequently an issue of legal liability. In the event that your honeypot is utilized in an attack on another business, you'll be sued. The level of risk that it presented will depend on the honeypot. Typically, the more complex the honeypot, the more noteworthy the risk is likely to be.

-------------------------------------------------------------------------------------------------------------------------------------------------------------

Hope it helps. Please upvote if you are happy with the answer