In the world of computer security, honeypots are called traps that aim to detect or neutralize any unauthorized access to computer networks.
Honeypots can exist on individual computers, datasets, or areas of the network that appear valuable or worth exploring by uninvited guests, but which are actually designed to trap or even monitor the attacker.
In general, a honeypot consists of data (for example, on a network location) that appears to be a normal site location, but is actually isolated and monitored. So it may appear to contain information valuable to attackers, but is designed to block them.
Honeypots are usually divided into two main categories: production honeypots and research honeypots.
Production honeypots are traps from real entities that seek to protect valuable data of a public organization or company, and research honeypots are designed to monitor and study hackers who fall into the trap.
Two or more honeypots on a network constitute a Honeynet. Typically, a Honeynet is used to monitor a larger or more diverse network where a single honeypot is not sufficient. Honeynets and honeypots are usually implemented as parts of larger network intrusion detection systems. A honeyfarm is a collection of honeypots and analysis tools.
The concept of a Honeynet first began in 1999, when Lance Spitzner, founder of the Honeynet project, published “To Build a Honeypot.”
“A Honeynet is a highly interactive network of honeypots that simulates a production network and is configured so that all activity is monitored, recorded, and to some extent, discreetly regulated.”
