<?xml version="1.0" encoding="UTF-8"?><!-- generator="wordpress/2.1.2" -->
<rss version="2.0" 
	xmlns:content="http://purl.org/rss/1.0/modules/content/">
<channel>
	<title>Comments on: Honeyd</title>
	<link>http://secure2s.net/tools/2006/06/24/honeyd/</link>
	<description>Secure2S Security Tool Sets Blog</description>
	<pubDate>Sun, 07 Sep 2008 15:50:14 +0000</pubDate>
	<generator>http://wordpress.org/?v=2.1.2</generator>

	<item>
		<title>By: ha.ckers.org web application security lab - Archive &#187; The Matrix as a Security Model</title>
		<link>http://secure2s.net/tools/2006/06/24/honeyd/#comment-5</link>
		<author>ha.ckers.org web application security lab - Archive &#187; The Matrix as a Security Model</author>
		<pubDate>Mon, 03 Jul 2006 18:34:10 +0000</pubDate>
		<guid>http://secure2s.net/tools/2006/06/24/honeyd/#comment-5</guid>
					<description>[...] One way to deal with web application security threats is to prevent them (IPS), one way is to detect them (IDS/HIDS) and then there&#8217;s another way that I came up with called the Matrix. It&#8217;s loosely based on the same concept of a honeynet where you show something as vulnerable but in reality you are watching what they are doing. The difference between a honeynet and the Matrix is that in a honeynet you are actually allowing them to hack a network device (which is being heavily monitored) and in the Matrix you are giving them erroneous information upon detection of a possible threat. Let me preface this post by saying this is not completely thought out and comments/flames are welcome. [...]</description>
		<content:encoded><![CDATA[<p>[&#8230;] One way to deal with web application security threats is to prevent them (IPS), one way is to detect them (IDS/HIDS) and then there&#8217;s another way that I came up with called the Matrix. It&#8217;s loosely based on the same concept of a honeynet where you show something as vulnerable but in reality you are watching what they are doing. The difference between a honeynet and the Matrix is that in a honeynet you are actually allowing them to hack a network device (which is being heavily monitored) and in the Matrix you are giving them erroneous information upon detection of a possible threat. Let me preface this post by saying this is not completely thought out and comments/flames are welcome. [&#8230;]</p>
]]></content:encoded>
				</item>
</channel>
</rss>
