|
Among the specific information BearTrap provides is:
Data Capture. The BearTrap logs the port attacked, IP address of attacker, password used by the attacker. BearTrap shows all intruder keystrokes, including chat conversations with accomplices.
Port Monitoring and Worm Detection. The BearTrap detects scans, probes or other unauthorized activity. One of the greatest threats to security is automated attack from auto routers or worms that focus on specific vulnerabilities and rapidly propagate by scanning for and attacking vulnerable systems. Bear Trap can help detect these worm attacks, determine how they operate and what they attack and stop their spread before extensive damage is done.
|