Virtual Honeypots: From Botnet Tracking to Intrusion Detection - Softcover

Provos, Niels

Softcover

ISBN 10: 0321336321 ISBN 13: 9780321336323

Publisher: Addison-Wesley Professional, 2007

Synopsis

Praise for Virtual Honeypots A power-packed resource of technical insightful information that unveils the world of honeypots in front of the reader's eyes." --Lenny Zeltser Information Security Practice Leader at Gemini Systems "This is one of the must-read security books of the year." --Cyrus Peikari CEO Airscanner Mobile Security author security warrior "This book clearly ranks as one of the most authoritative in the field of honeypots. It is comprehensive and well written. The authors provide us with an insider's look at virtual honeypots and even help us in setting up and understanding an otherwise very complex technology." --Stefan Kelm Secorvo Security Consulting "Virtual Honeypots is the best reference for honeypots today. Security experts Niels Provos and Thorsten Holz cover a large breadth of cutting-edge topics from low-interaction honeypots to botnets and malware. If you want to learn about the latest types of honeypots how they work and what they can do for you this is the resource you need." --Lance Spitzner Founder Honeynet Project "Whether gathering intelligence for research and defense quarantining malware outbreaks within the enterprise or tending hacker ant farms at home for fun you'll find many practical techniques in the black art of deception detailed in this book. Honeypot magic revealed!" --Doug Song Chief Security Architect Arbor Networks "Seeking the safest paths through the unknown sunny islands called honeypots? Trying to avoid greedy pirates catching treasures deeper and deeper beyond your ports? With this book any reader will definitely get the right map to handle current cyber-threats. Designed by two famous white hats Niels Provos and Thorsten Holz it carefully teaches everything from the concepts to practical real-life examples with virtual honeypots. The main strength of this book relies in how it covers so many uses of honeypots: improving intrusion detection systems slowing down and following incoming attackers catching and analyzi

About this title

About the Author

Niels Provos received a Ph.D. from the University of Michigan in 2003, where he studied experimental and theoretical aspects of computer and network security. He is one of the OpenSSH creators and known for his security work on OpenBSD. He developed Honeyd, a popular open source honeypot platform; SpyBye, a client honeypot that helps web masters to detect malware on their web pages; and many other tools such as Systrace and Stegdetect. He is a member of the Honeynet Project and an active contributor to open source projects. Provos is currently employed as senior staff engineer at Google, Inc.

Thorsten Holz is a Ph.D. student at the Laboratory for Dependable Distributed Systems at the University of Mannheim, Germany. He is one of the founders of the German Honeynet Project and a member of the Steering Committee of the Honeynet Research Alliance. His research interests include the practical aspects of secure systems, but he is also interested in more theoretical considerations of dependable systems. Currently, his work concentrates on bots/botnets, client honeypots, and malware in general. He regularly blogs at http://honeyblog.org.

Edition details

• Publisher: Addison-Wesley Professional
• Publication date: 2007
• ISBN 10: 0321336321
• ISBN 13: 9780321336323
• Binding: Paperback
• Language: English
• Edition number: 1
• Number of pages: 464