North American Network Operators Group
Date Prev | Date Next | Date Index | Thread Index | Author Index | Historical

Re: Arbor Networks DoS defense product

  • From: Rob Thomas
  • Date: Wed May 15 16:42:41 2002 
Hi, Dan.

] What leads them to believe this?

Well folks aren't exactly subtle about their honeypots.  Read any of
the popular security lists for examples of "Hi!  My honeypot was hit
last night with blah and blah, here is the sniffer trace..."  The
underground shares and trades information as well, so some of the
miscreants learn from experience or each other which networks respond
to attacks, scans, hacking, etc.

] It could be very useful as deterrence to know their criteria.

For the low fee of a cool t-shirt or a bit of gear for my lab I'd be
happy to spread rumours about the mad fast honeypot residing within
your prefixes.  :)

Thanks,
Rob.
--
Rob Thomas
http://www.cymru.com/~robt
ASSERT(coffee != empty);