VietMX Staff asked 3 years ago
A honeypot is an information system that is configured to detect an intruder by mirroring a real production system. It appears as an ordinary service doing work, but all the data and transactions are phony. Located either in or outside the firewall, the honeypot is used to learn about an intruder’s techniques as well as determine vulnerabilities in the real system.
In practice, honeypots are computers which masquerade as unprotected. The honeypot records all actions and interactions with users. Since honeypots don’t provide any legitimate services, all activity is unauthorized (and possibly malicious).
