UCF STIG Viewer Logo

The network element must include components to proactively seek to identify web-based malicious code.


Overview

Finding ID Version Rule ID IA Controls Severity
V-27394 SRG-NET-000237 SV-34702r1_rule Medium
Description
A honeypot simulates multiple platforms and services used to attract and contain the attackers. To the attacker, it appears to be part of a production network providing services. A honeypot can be one or more hosts deployed within a DMZ or screened sub-net. Honeypots can be used for surveillance, as an early-warning tool, to discover security weaknesses, and to help assess threats. They also will tie up an attacker's resources as they burn time and effort. Honeypots should have no production value, and should not see any legitimate traffic or activity. Whatever they capture is malicious or unauthorized traffic.
STIG Date
Network Security Requirements Guide 2011-12-28

Details

Check Text ( None )
None
Fix Text (None)
None