Honeypots: Catching the Insider Threat

In the past several years there has been extensive research into honeypot technologies, primarily for detection and information gathering against external threats. However, little research has been done for one of the most dangerous threats, the advance insider, the trusted individual who knows your internal organization. These individuals are not after your systems, they are after your information. This presentation discusses how honeypot technologies can be used to detect, identify, and gather information on these specific threats.

• Type: Conference
• Year: 2003
• Where: ACSAC
• Authors: Lance Spitzner
• Keywords: ACSAC 2003, Dangerous Threats, External Threats, Honeypot Technologies, Security Privacy