IDS Comparisons with DShield Honeypot Data, (Thu, Jul 6th)

An Intrustion Detection System (IDS) can be helpful to identify suspicious activity. The information recieved from these tools needs to be tuned to the environment so the tool can highlight what is unusual. When looking at honeypot data, it is anticipated to see internet scanners and malicious traffic. What’s the point of looking at IDS data for a honeypot? Well, it can be useful to test and IDS or compare different IDS tools. In my lab environment, network data is …

comparisons data detection dshield environment honeypot identify ids information internet malicious point scanners system tool tools traffic what is