Open Krishsinghal123 opened 6 years ago
Excellent question. Since the data in the honeypot should be fake or useless, corruption shouldn't be a factor. As to the system itself, I would suggest saving the system state before deploying the honeypot. When it gets corrupted, you can easily just re-install the same state. A key point here is that honeypots are intended to be used to detect malicious activity on a network. They are not intended to be used as a firewall or as other such security devices.
But can I run it with docker or virtually?
On 18 February 2018 at 23:32, Kirk Powell notifications@github.com wrote:
Excellent question. Since the data in the honeypot should be fake or useless, corruption shouldn't be a factor. As to the system itself, I would suggest saving the system state before deploying the honeypot. When it gets corrupted, you can easily just re-install the same state. A key point here is that honeypots are intended to be used to detect malicious activity on a network. They are not intended to be used as a firewall or as other such security devices.
— You are receiving this because you authored the thread. Reply to this email directly, view it on GitHub https://github.com/Dreamwalker420/honeypot/issues/1#issuecomment-366534430, or mute the thread https://github.com/notifications/unsubscribe-auth/Ab8POGa3coDabSMnstxk5csGuSKpEZ7Qks5tWGWqgaJpZM4SJxZk .
I don't see why not ... but I also don't think that that would serve much purpose? Docker enables you to run systems on the cloud, and the benefit to virtual terminals would be to maintain development state. I don't see how either of these situations would benefit from a honeypot? What is your desired purpose?
I think I need to understand more about docker, although I'm using this project "honeypots'" for learning purpose. I've taken up this as my major project. If you can provide any insight or anything that would help me, would be great.
Thanks
On 23 February 2018 at 02:44, Kirk Powell notifications@github.com wrote:
I don't see why not ... but I also don't think that that would serve much purpose? Docker enables you to run systems on the cloud, and the benefit to virtual terminals would be to maintain development state. I don't see how either of these situations would benefit from a honeypot? What is your desired purpose?
— You are receiving this because you authored the thread. Reply to this email directly, view it on GitHub https://github.com/Dreamwalker420/honeypot/issues/1#issuecomment-367824219, or mute the thread https://github.com/notifications/unsubscribe-auth/Ab8POJ1MaEwD5aM7SUz9krZ0lbajWd-Wks5tXdi5gaJpZM4SJxZk .
How to shut it down so that no harm is done to the device or data?