One of the pillars of a good cybersecurity In a company it begins by having a good computer network. If any of the components within it does not work well or is violated due to internal or external threats, we put at risk the entire system and we are defenseless against any attack.
The cybersecurity within a company it is very important to safeguard its information, with the Master in Cybersecurity Management, Ethical Hacking and Offensive Security in EIP You will train to be a professional in this field.
What is Honeypot?
One of the elements that make our network more secure is the honeypot, since it works as a early warning system against attacks.
With this very nice name is how this one is known. protection system whose function is to imitate the possible targets of cyber attacks.
The Honeypot is a technique or tool to know the enemy, since it is a “trap system” located on the network, whose main function is to detect and obtain all the information about the cyber attack and how the cybercriminals.
They have existed for decades but are becoming more sophisticated.
Continuing with the culinary simile (honeypot, literally means honey pot), we can imagine this technique as a mouse trap with cheese, so that cyber attackers are attracted to the “cheese” which we can say is the information they want and the HoneyPot is the trap where the cheese is.
How do Honeypots work?
If, for example, we worked in a insurance company, we would set up a Honeypot system so that the Cybercriminals believe they are within our network, with fictitious data, files and everything imaginable to make it real.
We can monitor traffic to this system to better understand cybercriminals, how they attack and what they are looking for above all and in order to determine what security measures we have to implement to avoid succumbing to these attacks.
Honeypot Types
We can classify the types of honeypots according to the degree of interaction with the cyber attacker, so we can differentiate them as low or high interaction Honeypot.
- Low interaction. Your interaction with the cyber attacker is almost zero and its function is to imitate applications, systems or equipment on the network. With this simulation we manage to obtain information about the attacker.
- High interaction. This type of honeypot typically consists of teams with identical real systems to those that the servers they imitate would have. They are computers that operate on a real network with real systems. A high interaction honeypot should be fully protected Since, if not, the cybercriminal can infiltrate our local network and achieve their main objective, accessing our systems.
The HoneyPots They can be very useful to know What type of cybercriminal wants to attack us?, the Honeypot must be well configured and have succulent information, not real of course, so that the cybercriminal shows his weapons and we can thusto protect us from their attacks in our real system.
