Honeynet

An example for high-interaction honeypot is a honeynet.

• Honeynets are networks of honeypots
  • Honeynets form the security infrastructure; in other words, they simulate the complete layout of a network of computers but are originally intended for “capturing” attacks.
• The goal is to develop a network wherein all activities are controlled and tracked.
• This network contains potential victim decoys, and the network even has real computers running real applications.
• They are effective in determining the complete capabilities of adversaries by recording the various TTPs employed by attackers to exploit networks.
• Information gathered from honeynets can help determine the full scope of an attacker's capabilities.