A Honeypot Based Worm Alerting System

Network administrators are always looking for simple and effective ways to make their company networks more secure and resilient from worms and viruses. It is a great thing to proactively address problems before they become mountains. One way to 'sweeten' a private network is with a honeypot that sends alerts when worm and virus infected machines are crawling the network; those nasties are looking for another vulnerable box to infect. This paper describes how to implement a Honeyd based honeypot to provide notification via email when worm and virus network traffic is detected.