Low Interaction
Low interaction client honeypots differ from high interaction client honeypots in that they do not utilize an entire real system, but rather use lightweight or simulated clients to interact with the server. (in the browser world, they are similar to web crawlers). Responses from servers are examined directly to assess whether an attack has taken place. This could be done, for example, by examining the response for the presence of malicious strings.
Low interaction client honeypots are easier to deploy and operate than high interaction client honeypots and also perform better. However, they are likely to have a lower detection rate since attacks have to be known to the client honeypot in order for it to detect them; new attacks are likely to go unnoticed. They also suffer from the problem of evasion by exploits, which may be exacerbated due to their simplicity, thus making it easier for an exploit to detect the presence of the client honeypot.
Read more about this topic: Client Honeypot
Famous quotes containing the word interaction:
“UG [universal grammar] may be regarded as a characterization of the genetically determined language faculty. One may think of this faculty as a ‘language acquisition device,’ an innate component of the human mind that yields a particular language through interaction with present experience, a device that converts experience into a system of knowledge attained: knowledge of one or another language.”
—Noam Chomsky (b. 1928)
“Our rural village life was a purifying, uplifting influence that fortified us against the later impacts of urbanization; Church and State, because they were separated and friendly, had spiritual and ethical standards that were mutually enriching; freedom and discipline, individualism and collectivity, nature and nurture in their interaction promised an ever stronger democracy. I have no illusions that those simpler, happier days can be resurrected.”
—Agnes E. Meyer (1887–1970)