This is a mirror of official site: http://jasper-net.blogspot.com/

Introduction to KFSensor - A Windows based honeypot Intrusion Detection System (IDS)

| Tuesday, October 9, 2012
Inline image 2

Overview

KFSensor is a security solution that acts as a honeypot to attract and detect hackers and worms by simulating vulnerable system services and trojans.
By acting as a decoy server it can divert attacks from critical systems and provide a higher level of information than can be achieved by using firewalls and NIDS alone.

KFSensor is designed for use in a Windows based corporate environment and contains many innovative and unique features such as remote management, a Snort compatible signature engine and emulations of Windows networking protocols.

With its GUI based management console, extensive documentation and low maintenance, KFSensor provides a cost effective way of improving an organization's network security.

Moreover, KFSensor allow a easy integration with a common SIM/SOC & Syslog systems & Databases.

Prerequisites

a. Supported Windows Operating System.
b. Latest Wincap driver (can be download from the following link).

* Its recommended to install KFSensor on a dedicated machine.

Configuration Steps

KeyFocus Ltd. developer team created a user friendly “Set Up Wizard” that allow you to complete a common deployment scenario in a few minutes:

Read more: Yuval Sinay
QR: Inline image 1

Posted via email from Jasper-net

0 comments: