Honeypot
Honeypot
Köder- bzw. Täuschungssystem
A honeypot is a deliberately vulnerable- or attractive-looking decoy system that serves no productive purpose — and precisely for that reason is a valuable early-warning signal: any interaction with it is suspicious. Honeypots serve to lure attackers, study their behaviour and detect attacks early. They are a classic means of deception technology.
History & facts. The idea is old and effective: set up a system that no one should legitimately contact, and any access to it is already an alarm — without the noise that normal production systems generate. Honeypots range from simple, low-interaction decoys to elaborately replicated systems that bind an attacker longer and yield deeper insights. They thereby produce high-quality, context-rich indicators.
Outlook & recommendation. Deception is a rarely exhausted but highly effective element of detection because it produces hardly any false alarms. Clean isolation matters so that a decoy does not itself become an entry point. In tiered detection models such as Extended Security Incident and Event Management (XIEM), deception technology is already provided in the base tier, Sentry — as an additional, quiet source of visibility alongside endpoint and network observation.