Dreamwalker420 / honeypot

Simple Honeypot Implementation
GNU General Public License v3.0
3 stars 0 forks source link

Bash terminal #1

Open Krishsinghal123 opened 6 years ago

Krishsinghal123 commented 6 years ago

How to shut it down so that no harm is done to the device or data?

Dreamwalker420 commented 6 years ago

Excellent question. Since the data in the honeypot should be fake or useless, corruption shouldn't be a factor. As to the system itself, I would suggest saving the system state before deploying the honeypot. When it gets corrupted, you can easily just re-install the same state. A key point here is that honeypots are intended to be used to detect malicious activity on a network. They are not intended to be used as a firewall or as other such security devices.

Krishsinghal123 commented 6 years ago

But can I run it with docker or virtually?

On 18 February 2018 at 23:32, Kirk Powell notifications@github.com wrote:

Excellent question. Since the data in the honeypot should be fake or useless, corruption shouldn't be a factor. As to the system itself, I would suggest saving the system state before deploying the honeypot. When it gets corrupted, you can easily just re-install the same state. A key point here is that honeypots are intended to be used to detect malicious activity on a network. They are not intended to be used as a firewall or as other such security devices.

— You are receiving this because you authored the thread. Reply to this email directly, view it on GitHub https://github.com/Dreamwalker420/honeypot/issues/1#issuecomment-366534430, or mute the thread https://github.com/notifications/unsubscribe-auth/Ab8POGa3coDabSMnstxk5csGuSKpEZ7Qks5tWGWqgaJpZM4SJxZk .

Dreamwalker420 commented 6 years ago

I don't see why not ... but I also don't think that that would serve much purpose? Docker enables you to run systems on the cloud, and the benefit to virtual terminals would be to maintain development state. I don't see how either of these situations would benefit from a honeypot? What is your desired purpose?

Krishsinghal123 commented 6 years ago

I think I need to understand more about docker, although I'm using this project "honeypots'" for learning purpose. I've taken up this as my major project. If you can provide any insight or anything that would help me, would be great.

Thanks

On 23 February 2018 at 02:44, Kirk Powell notifications@github.com wrote:

I don't see why not ... but I also don't think that that would serve much purpose? Docker enables you to run systems on the cloud, and the benefit to virtual terminals would be to maintain development state. I don't see how either of these situations would benefit from a honeypot? What is your desired purpose?

— You are receiving this because you authored the thread. Reply to this email directly, view it on GitHub https://github.com/Dreamwalker420/honeypot/issues/1#issuecomment-367824219, or mute the thread https://github.com/notifications/unsubscribe-auth/Ab8POJ1MaEwD5aM7SUz9krZ0lbajWd-Wks5tXdi5gaJpZM4SJxZk .