Summary
BackOfficer Friendly is a free, low-interaction honeypot. It is primarily a production honeypot used to detect attacks. Its advantages and disadvantages are summarized in Table 6-1.
Advantages of BOF | Disadvantages of BOF |
---|---|
Easy to install, configure and maintain. | Limited to seven ports on which it can detect attacks. |
Runs on any Windows- or Unix-based platform, including most desktop or laptop systems. | Ports cannot be customized, increasing the possibility of fingerprinting. |
Little risk, due to simplicity. | No remote logging, alerting, or configuring functionality; thus, not appropriate for enterprise level. |
In the next chapter we will look at Specter, another low-interaction honeypot, which has ...
Get Honeypots: Tracking Hackers now with the O’Reilly learning platform.
O’Reilly members experience books, live events, courses curated by job role, and more from O’Reilly and nearly 200 top publishers.