Network traps, sometimes referred to as ‘honeypots’ or ‘honey traps’, are an intrusion detection technique. They take the form of decoy endpoints distributed throughout the network that effectively lie dormant, appearing to be a viable endpoint within the network.
The network trap is set up to look just like a regular system to attract attackers to connect to it so that their actions can be studied. A network trap’s value lies in being probed, attacked or compromised; providing indications of intrusion if triggered or interacted with.
The Cybowall solution integrates network traps to enable visibility into suspicious and potentially malicious activity between endpoints within a given network – often referred to as lateral movement. When Cybowall’s network traps are interacted with, the Cybowall solution collects information regarding the type and origin of that interaction. An alert is sent through the system to inform of abnormal activity inside the network’s perimeter defenses, and enables organizations to analyze, mitigate and respond to potential breaches.
Cybowall’s approach is to combine network trap capabilities alongside other technologies in one intuitive and affordable solution for maximum network visibility, vulnerability management and breach detection. It integrates system topology mapping, intrusion detection (IDS), a malware hunter tool, centralized endpoint monitoring, password management and SIEM capabilities, including actionable event correlation and reporting.