Intrusion Detection Honeypots with Security Onion - Layers of Deception

Explore the concept of Intrusion Detection Honeypots (IDH) in this 44-minute conference talk from the Security Onion Conference 2021. Learn how these deceptive security resources, placed inside network perimeters, generate alerts when probed or attacked. Discover the effectiveness of IDH as a low-cost, high-efficacy form of intrusion detection. Gain insights from speakers Chris Sanders and Josh Brower as they demonstrate a new experimental Security Onion feature for quick deployment of honey services in networks, integrating alerts into the SO monitoring pipeline. Understand how IDH systems, services, and tokens lure attackers, enabling immediate investigation upon interaction.