Evaluation of Fingerprinting Techniques and a Windows-based Dynamic Honeypot
Server honeypots are static systems, setup to monitor attacks on research and production networks. Static honeypots are unable to represent the dynamic nature of today's networks where different numbers of hardware devices and hosts running various operating systems are online at a particular time and frequently join and leave a network. A single static server honeypot presents a particular operating system, open ports and hardware type which are associated with a unique address (i.e. IP/MAC address). A static honeypot system is also always present on the network while other hosts leave and join frequently.