IPD, IDS and honeypots
José Vicente Tomé Vecchione <[email protected]> Tue, 30 Aug 2005 01:36:18 -0400
| Newsgroups | gmane.comp.security.honeypots |
|---|---|
| Message-ID | <!~!UENERkVCMDkAAQACAAAAAAAAAAAAAAAAABgAAAAAAAAAt6ywCayEHUec3he8Ma3SRsKAAAAQAAAASYkJNd+fi0Gbp1UxT2XcbQEAAAAA@gmail.com> |
Hi. I'm making an investigation about honeypots and I am researching about IDS and IPS. Can anyone help me to identify the differences between IPS and IDS and how an IPS could improve a honeypot implementation? I have a homemade honeypot implemented over a virtual machine running under ubuntu linux. Could I use the interface of the real system as the "firewall - IDS" part of the IPS and route the filtered packages to the virtual machine's nic? Thanks! José Vicente Tomé Vecchione [email protected]
Glacier Bkgrd.jpg
(image/jpeg, 2.7 KB) - not displayed