IPD, IDS and honeypots

José Vicente Tomé Vecchione <[email protected]> Tue, 30 Aug 2005 01:36:18 -0400
Newsgroups gmane.comp.security.honeypots
Message-ID <!~!UENERkVCMDkAAQACAAAAAAAAAAAAAAAAABgAAAAAAAAAt6ywCayEHUec3he8Ma3SRsKAAAAQAAAASYkJNd+fi0Gbp1UxT2XcbQEAAAAA@gmail.com>
Hi.
 
I'm making an investigation about honeypots and I am researching about IDS
and IPS. Can anyone help me to identify the differences between IPS and IDS
and how an IPS could improve a honeypot implementation? I have a homemade
honeypot implemented over a virtual machine running under ubuntu linux.
Could I use the interface of the real system as the "firewall - IDS" part of
the IPS and route the filtered packages to the virtual machine's nic?
 
Thanks!
 

 	
   José Vicente Tomé Vecchione	
   [email protected]
Glacier Bkgrd.jpg (image/jpeg, 2.7 KB) - not displayed