To provide scalable, early warning and analysis of new Internet threats like worms or automated attacks, the paper proposes a globally distributed, hybrid monitoring architecture that can capture and analyze new vulnerabilities and exploits as they occur. To achieve this, the architectures increases the exposure of high-interaction honeypots to these threats by employing low-interaction honeypots as frontend content filters. Host-based techniques capture relevant details such as packet payload of attacks while network monitoring provides wide coverage for quick detection and assessment.
Did you find this white paper useful?
Related white papers
U.S. Bancorp: Using VeriSign to Further Strengthen Its Network Security
US Bancorp (NYSE: USB), the sixth largest financial services holding company in the United States, a Fortune 500 company with assets in excess of $189 billion, invested heavily in network...
Live Webcast: Simplified Management with IT Automation
Businesses of all sizes must now contend with complex systems and a variety of business challenges, including regulatory compliance, green computing initiatives, and pressure to reduce IT costs. Add to...
TechNet Webcast: System Center and the Desktop (Level 300)
With the increasing reliance on electronic information, the redefining of the network perimeter to the user level, and greater security challenges, modern organizations need to deploy and securely manage an...
Technology Services Provider Improves Efficiency and Productivity
Satyam Computer Services Ltd. (Satyam) wanted a solution that would keep conflicts and system disruptions in check, minimize user downtime and inconvenience, and avoid exposure to security threats. The company...
Industrial and Commercial Bank of China Centralized CICS Monitoring
Industrial and Commercial Bank of China is the largest bank in the People's Republic of China (PRC) with over 560,000 employees and annual profits of US $416.7 million. Managing systems...
TechNet Webcast: Configuration Manager 2007 and Network Access Protection (Level 300)
Microsoft System Center Configuration Manager 2007 introduces new levels of security, enabling new and improved ways of managing clients both inside the corporate network, and in mobile scenarios. Configuration Manager...
TechNet Webcast: System Center and the Datacenter (Level 300)
Businesses are demanding more processing power to succeed in today's digital marketplace, requiring their data centers to rapidly scale and adopt innovations in virtualization, clustering, and server consolidation. In contrast...
