Re: stopping the wiley hacker



On Sat, 21 Jul 2001, Alvin Oga wrote:
> hi ya zachary

hi alvin!

> dont have any honeypot per se ....but if they find something...
> you have say 2 minutes to catch um... if you dont.. you can
> be lucky and they not doing much or unlucky and they do
> worst damage...

wow 2 mins only

> what you do or not would depend on time/$$$/expertise you have/
> and what they want from your box

hmm. but what i am thinking of is a system set up in such a way
as that no matter what the inruder does there every move is being
watched/logged and they cannot discover that this is going on. i
was curious as to how this is done. i recall reading Cliff
Stoll's "The Cuckoo's Nest" years ago and he set up such a system
(was some early UNIX and/or VAX IIRC) and today I have heard of
this practice still going on.


zach

uram@cmu.edu
"Blessed are those who have not seen and yet have faith." - John 20:29

_______________________________________________
Firewalls mailing list
Firewalls@lists.gnac.net
http://lists.gnac.net/mailman/listinfo/firewalls



questions/problems with archive to: webmaster@mcabee.org
Mail converted by MHonArc 2.4.7