CYS406 · Chapter 14 · Annotated Slides

Overview

Honeypots and Proxy Servers

Honeypots and their types (low, medium and high interaction, production vs. research), honeypot tools, then proxy servers: benefits, how they work, proxy vs. packet filter, transparent, non-transparent, SOCKS, anonymous and reverse proxies, configuration and limitations.

How to read this page

Every original slide is shown unchanged. Yellow marks on a slide point to a numbered note: hover or tap a mark to jump to its note, and hover a note to see its marks. Questions tagged Past exam appeared on a real paper; Prediction questions are likely angles, not confirmed. Pick an answer to each question: a wrong pick tells you why it is wrong, so you can try again.

All 25 slides

1 Module Flow
2 Honeypot
3 Types of Honeypots
4 Types of Honeypots (Cont’d)
5 Types of Honeypots (Cont’d)
6 Honeypot Tools
7 Module Flow
8 What are Proxy Servers?
9 Benefits of Proxy Server
10 Functioning of a Proxy Server
11 Functioning of a Proxy Server (Cont’d)
12 Proxy Servers vs Packet Filters
13 Types of Proxy Servers
14 Transparent Proxy
15 Non-transparent Proxy
16 SOCKS Proxy
17 Anonymous Proxy
18 Reverse Proxy
19 How to Configure Proxy Server
20 How to Configure Proxy Server (Cont’d)
21 How to Configure Proxy Server (Cont’d)
22 How to Configure Proxy Server (Cont’d)
23 Limitations of Proxy Server
24 Example of a Proxy Server: Squid Proxy
25 List of Proxy Tools

Slide 1 / 25

Module Flow

Slide 2 / 25

Honeypot

Notes

Honeypot: a decoy system with no production value; any interaction with it is suspicious. Used to detect and study attackers.

Exam angle

PredictionQ1

The purpose of a honeypot is to:

Slide 3 / 25

Types of Honeypots

Notes

Low-interaction: emulates a few services (safe, limited data). High-interaction: real OS and services (rich data, more risk). Production vs. research honeypots.

Exam angle

PredictionQ1

Which honeypot gives the most information but carries the most risk?

Slide 4 / 25

Types of Honeypots (Cont’d)

Slide 5 / 25

Types of Honeypots (Cont’d)

Slide 6 / 25

Honeypot Tools

Slide 7 / 25

Module Flow

Slide 8 / 25

What are Proxy Servers?

Notes

Proxy server: an intermediary that makes requests on behalf of clients (hides them, filters content, caches).

Slide 9 / 25

Benefits of Proxy Server

Slide 10 / 25

Functioning of a Proxy Server

Slide 11 / 25

Functioning of a Proxy Server (Cont’d)

Slide 12 / 25

Proxy Servers vs Packet Filters

Slide 13 / 25

Types of Proxy Servers

Slide 14 / 25

Transparent Proxy

Slide 15 / 25

Non-transparent Proxy

Slide 16 / 25

SOCKS Proxy

Notes

SOCKS proxy: generic, works for any TCP/UDP application.

Slide 17 / 25

Anonymous Proxy

Slide 18 / 25

Reverse Proxy

Notes

Reverse proxy: sits in front of SERVERS (load balancing, TLS termination, protection).
Trap Forward proxy protects/represents clients; reverse proxy protects/represents servers.