Honeypots for Active Defense - A Practical Guide to Deploying Honeynets Within the Enterprise
Explore active defense strategies through honeypots in this 49-minute conference talk from Central Ohio Infosec 2015. Delve into traditional defensive concepts, InfoSec realities, and the importance of internal honeypots. Learn about various honeypot types, including Windows Powershell Honeyports and Artillery Logging. Discover practical use cases, such as file integrity monitoring and learning from attackers. Examine tools like Web Labyrinth, fake login panels, and Honeybadger for emulating services and capturing attacker data. Gain insights into analysis tools, high-interaction honeypots, and enterprise threat intelligence. Explore monitoring techniques, event correlation, and honeypot dashboards. Conclude with closing thoughts and recommended reading on offensive countermeasures and active defense strategies.