Slashdot Mirror

← Back to Stories (view on slashdot.org)

Web Honeynet Project IDs Attackers

Posted by Zonk on from the they-can-see-youuuu dept.

narramissic writes "The Web Honeynet Project, an independent group of Honeynet researchers from Securiteam and the ITOSF, is putting a new twist on Web application honeynets by naming not only the attack details, but the IP addresses and other tracking information about the attackers as well. As security consultant Brent Huston notes, 'This approach is not unheard of, as lists of known high-volume attackers have been circulating through the Net for several years, but this is the first time someone has applied the honeynet concept to making attacker IP data publicly known.'"

4 of 70 comments (clear)

  1. How to fix Windows' security issues by Anonymous Coward · · Score: 0, Offtopic

    Place a PF firewall in front of your core routers (FreeBSD, NetBSD, OpenBSD) and add this:

    block in drop quick on $ext_if proto {tcp, udp} from any to any os Windows

    Glass

    1. Re:How to fix Windows' security issues by Kream · · Score: 1, Offtopic

      For those running Linux, pf also runs on Gentoo :)

  2. Nuke 'em by Anne+Thwacks · · Score: -1, Offtopic

    I say we nuke 'em from high obit. Its the only way to be sure!

    --
    Sent from my ASR33 using ASCII
    1. Re:Nuke 'em by Anonymous Coward · · Score: -1, Offtopic

      Fuck'in'ay.

      But in all honesty, Vasquez, in this case I think rolling in a few canisters CN-20 nerve gas probably will do the job. Besides, think of the satisfaction to be had watching them twitch and foam.