Skip to main content

Honeypot

Definition

A honeypot is a deliberately vulnerable system or network designed to attract attackers and observe their behavior. Honeypots are used for early attack detection and collecting threat intelligence.

A honeypot looks like a legitimate system but contains no real valuable data. Any interaction with a honeypot is suspicious, making it easy to detect attackers.

Types: production honeypots (increase security of production environment) and research honeypots (study attacker behavior).

Related terms

Threat Hunting IOC (Indicator of Compromise)