Browse Definitions :
Definition

virtual honeypot

Contributor(s): Ivy Wigmore

A virtual honeypot is software that emulates a vulnerable system or network to attract intruders and study their behavior. 

Honeypot owners can gather information about intruders and their actions that can help identify network vulnerabilities and take actions to protect weak points. The information can also be used to determine what IP addresses and requests should be blocked. Attacker information can also be turned over to the authorities. 

Virtual honeypots contrast with hardware-based honeypots, which are dedicated computers, networks or network segments designed to serve the same purpose. Virtual honeypots can be thought of as virtual machines (VMs) which may exist in multiple configurations on a single computer or appliance to emulate various systems and vulnerabilities.

Virtual honeypots are cheaper to deploy and more secure than hardware-based systems. In some cases, for example, real honeypots have been infiltrated by intruders who were able to use them to attack the corporate network. However, because a virtual honeypot is an emulator, it doesn't function exactly as a real system does and hackers may be able to pick up on cues that indicate the difference. 

See a video introduction to using honeyd virtual honeypot software:

This was last updated in June 2018

Continue Reading About virtual honeypot

Start the conversation

Send me notifications when other members comment.

Please create a username to comment.

-ADS BY GOOGLE

File Extensions and File Formats

Powered by:

SearchCompliance

  • compliance audit

    A compliance audit is a comprehensive review of an organization's adherence to regulatory guidelines.

  • regulatory compliance

    Regulatory compliance is an organization's adherence to laws, regulations, guidelines and specifications relevant to its business...

  • Whistleblower Protection Act

    The Whistleblower Protection Act of 1989 is a law that protects federal government employees in the United States from ...

SearchSecurity

  • payload (computing)

    In computing, a payload is the carrying capacity of a packet or other transmission data unit. The term has its roots in the ...

  • passphrase

    A passphrase is a string of characters longer than the usual password (which is typically from four to 16 characters long) that ...

  • Web application firewall (WAF)

    A Web application firewall (WAF) is a firewall that monitors, filters or blocks traffic to and from a Web application. WAFs are ...

SearchHealthIT

SearchDisasterRecovery

SearchStorage

  • computational storage

    Computational storage is defined as an architecture that couples compute with storage in order to reduce data movement. In doing ...

  • data deduplication

    Data deduplication -- often called intelligent compression or single-instance storage -- is a process that eliminates redundant ...

  • public cloud storage

    Public cloud storage, also called storage-as-a-service or online storage is a service model that provides data storage on a ...

Close