Fwd: SF new article announcement: Defeating Honeypots - Network Issues, Part 2

[Lance Spitzner <lance () honeynet org>]

The following article was published on SecurityFocus today:

Defeating Honeypots: Network Issues, Part 2
By Laurent Oudot and Thorsten Holz  Oct 07, 2004

The purpose of this paper is to explain how attackers behave when they
attempt to identify and defeat honeypots, and is useful information for
security professionals who need to deploy honeypots in a more stealthy
manner. Part 2 looks at Sebek-based honeypots, snort_inline, Fake AP, 
and
Bait and Switch honeypots.

http://www.securityfocus.com/infocus/1805