Honeypot
a mechanism within a network that is setup with the intention to detect, deflect, or counteract attempts of unauthorized access into the network. Honeypod utilizes PSAD (Port Scan Attack Detection) that monitors for and detects suspicious traffic within your network to assist in the Honeypod machine learning algorithm and list-based system when it comes to protecting your network.

Sinkhole filtering is managed in two aspects. The first aspect is a list-based system in which there are pre-defined sources of fully qualified domain names that have been “blacklisted”. This blacklist is literally a list of sources that are known threats, ad servers, tracking systems, or general unwanted 3rd party services. The second aspect of filtering is through a machine learning algorithm called classification in which based upon a statistical probability from data points is able to determine an the class of the request resulting in the action of acceptance or denial.

Return to Previous Page
Read on Wikipedia
Technical Doc