Book Review Monday:::Virtual Honeypots
"Virtual Honeypots" is a must-read book that should be added to any security professional's bookshelf today. It's my "analyst's choice" for the month of August and well worth going out to your local bookstore to pick up a copy. Niels Provos and Thorsten Holz provide one of the best reference guides to honeypots currently available. The authors--Provos is a staff engineer at Google, and Holz a Ph.D. student at the University of Mannheim--go through the development of the honeypot through the lens of network and system monitoring. By setting up an observation system to see how it is probed, attacked or compromised, IT security pros can get a better idea of how to defend the systems under their care. While the book is easily accessible to any IT person, those with at least some experience with Linux--and with the willingness to use a Linux-based platform--will get the most out of...