Arbor Networks DoS defense product

Rob Thomas robt at cymru.com
Wed May 15 20:40:51 UTC 2002


Hi, Dan.

] What leads them to believe this?

Well folks aren't exactly subtle about their honeypots.  Read any of
the popular security lists for examples of "Hi!  My honeypot was hit
last night with blah and blah, here is the sniffer trace..."  The
underground shares and trades information as well, so some of the
miscreants learn from experience or each other which networks respond
to attacks, scans, hacking, etc.

] It could be very useful as deterrence to know their criteria.

For the low fee of a cool t-shirt or a bit of gear for my lab I'd be
happy to spread rumours about the mad fast honeypot residing within
your prefixes.  :)

Thanks,
Rob.
--
Rob Thomas
http://www.cymru.com/~robt
ASSERT(coffee != empty);





More information about the NANOG mailing list