MITRE D3FENDdefensive technique

D3-SHN Standalone Honeynet

Official page ↗
Tactic
Deceive

Definition

An environment created for the purpose of attracting attackers and eliciting their behaviors that is not connected to any production enterprise systems.

How it works

How it works A standalone honeynet does not directly interact with the real enterprise environment. It may be located near or in some portion of the enterprise address space, but it does not interact with enterprise resources. Considerations A standalone honeynet is a lower risk to deploy compared to connected or integrated honeynets due to its isolation from the enterprise network. However, this comes at cost in loss of fidelity and realism. Significant extra effort must be made in order to make the environment look realistic.

Related

Child of · MITRE D3FEND (1)

  • D3-DE Decoy Environment defensive technique

References