Honeypots for Windows (Books for Professionals by Professionals)

* Talks about hardening a Windows host before deploying Honeypot * Covers how to create your own emulated services to fool hackers * Discusses physical setup of Honeypot and network necessary to draw hackers to Honeypot * Discusses how to use Snort to co-exist with Honeypot * Discusses how to use a Unix-style Honeypot to mimic a Windows host * Discusses how to fine-tune a Honeypot * Discusses OS fingerprinting, ARP tricks, packet sniffing, and exploit signatures

Installing a honeypot inside your network as an early warning system can significantly improve your security. Currently, almost every book and resource about honeypots comes from a Unix background, which leaves Windows administrators still grasping for help. But Honeypots for Windows is a forensic journeyhelping you set up the physical layer, design your honeypot, and perform malware code analysis.

You’ll discover which Windows ports need to be open on your honeypot to fool those malicious hackers, and you’ll learn about numerous open source tools imported from the Unix world. Install a honeypot on your DMZ or at home and watch the exploits roll in! Your honeypot will capture waves of automated exploits, and youll learn how to defend the computer assets under your control.

Installing a honeypot inside your network as an early warning system can significantly improve your security. Currently, almost every book and resource about honeypots comes from a Unix background, which leaves Windows administrators still grasping for help. But __Honeypots for Windows__ is a forensic journeyhelping you set up the physical layer, design your honeypot, and perform malware code analysis. You'll discover which Windows ports need to be open on your honeypot to fool those malicious hackers, and you'll learn about numerous open source tools imported from the Unix world. Install a honeypot on your DMZ or at home and watch the exploits roll in! Your honeypot will capture waves of automated exploits, and youll learn how to defend the computer assets under your control. Front Matter....Pages i-xxv Front Matter....Pages 1-1 An Introduction to Honeypots....Pages 3-34 A Honeypot Deployment Plan....Pages 35-59 Front Matter....Pages 61-61 Windows Honeypot Modeling....Pages 63-88 Windows Honeypot Deployment....Pages 89-120 Honeyd Installation....Pages 121-149 Honeyd Configuration....Pages 151-166 Honeyd Service Scripts....Pages 167-188 Other Windows-Based Honeypots....Pages 189-220 Front Matter....Pages 221-221 Network Traffic Analysis....Pages 223-268 Honeypot Monitoring....Pages 269-300 Honeypot Data Analysis....Pages 301-336 Malware Code Analysis....Pages 337-361 Back Matter....Pages 363-392 The honeypot, an information system resource which is used as a security decoy (i.e. with the intent of being corrupted or compromised by a computer hacker or in a computer security breach situation) is featured Provides information on deploying a secure honeypot in a Windows environment.