HoneyPoint Security Server

What is HoneyPoint Security Server?

HoneyPoint Security Server is a powerful tool for organizations seeking to add effective threat management to their security efforts. Like a swiss army knife, HoneyPoint has many uses. It can assist with identifying internal malicious activity, help defend your perimeter against scans and probes, reduce your risk levels by breaking attacker tools used against you. It can help you find and block malware and bots in your environment and even bring realistic threat metrics into your SDLC and other architecture changes before a single line of code is written or a single change is made.

HoneyPoint Security Server

Track the real threats. HoneyPoint Security Server (HPSS) operates by leveraging the innate power of the “pseudo-service”. Using the ancient principle of honeypots, organizations can create security and gain intelligence based on the fact that if something is not real, any interaction with it or use of it, is by default, suspicious. HoneyPoint builds upon this historic approach in a bleeding-edge way to give organizations protection against a variety of threats, including zero-day exploits, without the need for signatures and ongoing configuration. Once deployed, HoneyPoint immediately goes to work to provide you with deep intelligence about the source, capability and intent of your attackers - and it does so while virtually eliminating the false positives associated with other security technologies.

Further, HoneyPoint leverages a new patent-pending approach called “defensive fuzzing” that can actually break attacker processes and the tools they use to compromise your network. Embodied in the HornetPoint, defensive fuzzing has proven to be an effective mechanism for stopping attacks before they have a chance to propagate.

HoneyPoint Trojans also add to the capability of the product and move it well beyond the role of more traditional honeypot approaches. These insidious little creations look and seem like real data, but are in effect Trojan horses aimed at stinging the attacker. The Trojans trigger when the file is opened, alerting the HoneyPoint console of the source of the activity and provides key information about the attacking system back to you. Attackers have used Trojans for thousands of years, but HoneyPoint lets you turn the table on would be hackers, robbing them of the confidentiality, integrity and availability they require to do their illicit work.

By combining HoneyPoints, HornetPoints and HoneyPoint Trojans in a wide scope throughout your environment, you create new capabilities for securing your data, understanding your threats and achieving compliance.

With HoneyPoint, attackers get stung instead of you!

HPSS Licensing

HoneyPoint Security Server is licensed by the number of listening pseudo-services. These can be a mixture of HoneyPoints, HornetPoints and/or HoneyPoint Trojans. Every listening port offering a pseudo-service requires a license. Licenses are issued in common amounts, starting with 10 pseudo-services and incrementing in common numbers up to 10,000 pseudo-services. Site licenses are available for organizations deploying more than 10,000 pseudo-services.

Each license includes one console on the platform of your choice. Additional consoles are also available at a nominal fee. A HoneyPoint proxy is available to facilitate crossing network boundaries without exposing the console system.

For more information on licensing, please contact your account executive.

HoneyPoint Supported Platforms

HoneyPoint Security Server supports a wide variety of platforms. The console component requires a GUI, but is supported on Windows, Linux and Macintosh OS X. The console application can be run on a stand-alone server or can share a server with other security product consoles. If desired, the console can also feed data into a SIM or SIEM platform via either syslog/event logs or the plugin interface.

HoneyPoints, HornetPoints and HoneyPoint Trojans do not require a GUI interface. They are configured and managed from the command line. They support Windows, Linux and Macintosh OS X. HoneyPoint Trojans can be created for specific platforms and are custom compiled on demand by MSI.

HPSS can be run in VMWare, including ESX. Virtual machine images for hosting HoneyPoints, HornetPoints and HoneyPoint Trojans are available on a hardened Linux platform.

Alerting, Reporting & Integration Capability

HPSS is capable of powerful alerting. The console component can be used as a full event management platform or can integrate directly into most other incident/event management products. Alerting is accomplished via email/SMS or virtually any other means desired. Syslog/event log integration is built in, and the plugin interface allows HPSS to communicate with virtually any product or device, including custom applications.

HPSS can be used as a part of defense in depth and black hole defenses by acting as additional sensors that can capture and terminate attack activity in the reconnaissance phase. Any host interacting with a HoneyPoint can be added to black lists, firewall or router rules or the like using plugins. This has also proven to increase security against bot attacks and worms.

Stock HTML reporting is provided for a variety of information and metrics. Custom report generation is available.

Put the Power of the Hive to Work for You!

Obtaining HoneyPoint is easy. Simply contact your account executive and request more information. Our team will work with you to identify the usage scenarios you are interested in, help you scope the number of pseudo-service licenses you need and generate an appropriate proposal.

But, the power of the hive doesn’t stop there. Assistance with planning, installation, configuration, reporting and monitoring are also available. Customization for specific needs is also possible.

Just give us a “buzz”. We’ll “bee” happy to help you!

For more information please download any of the following PDF documents:

HoneyPoint Security Server HPSSPressRelease.pdf
HoneyPoint Security Server HPSSFlyer10-28-08.pdf
HPSS&Malware.pdf with HoneyPoint Security Server

See what Brent Huston, our CEO and Security Evangelist, has to say about HPSS

System Requirements:

Requires Windows 2000 or later.
Requires Linux Kernel 2.2 or later.
Requires Mac OS v.10.2 or later.

BETTER SECURITY INSIGHTS

LESS HASSLES