Вы находитесь на странице: 1из 43

c

ô 
c

J  

9 c  cc
 c
c
  c c
  cc   cc
" #$ !c ccccccccccccccô
c

 c
c
Introducciónccc
Que es un Honeypotccc
Tipos de Honeypotsccc
cccc ccccc
cccccccc c 
cc
cccccccc c  ccc
cccc cc 
c c  
ccc
cccccccc  cccc
cccccccc  c
ccc
cccccccc  ccc
atras Caracteristicasccc
Especializacion de los Honeypotccc
Ubicacionccc
ccccG c c 
cc !c
cccc c c 
cc !c
ccccc
c
c 


cc c
HoneyTokenscc "c
Wi-Fi Honeypotscc #c
Repercusiones Legalescc c
cccc½

c c
cccc 

cc c
cccc 

cc c
’entajas y Desventajas de Honeypotcc c
cccc’ 

c c cc c
cccc  

c c cc c
Utilidades de Honeypotcc c
ccccM  
c cc cc c
cccc 


c 
cc c
cccc
c cc"!c
cccc
cM
cc"!c
cccc cc"!c
Honeynetscc"!c
Honeynets ’irtualescc""c
cccc  c’
cG!" 
cc""c
cccc  c’
c
cc"#c
EN Icc"c
EN IIcc"c
Honeynet Distribuidascc"c
cccc

c# c cc#!c

c  !9c
" #$ !c cccccccccccccc†
c

Que es KFSensorcc# c
Instalacion e Implementacioncc#"c
Conclusioncc"c
Bibliografiacc#

c  !9c
" #$ !c ccccccccccccccÑ
c

 $%&'& c

c
c c
c c  (c
c  c
c
 )c
c  c *
c c + c ,,c c
-./-c ,c 0c  
c 1c ./2c 3 c  c 4c 5  c   4
c
  c cc  
 c c c5 c
c  ccc. 6 cc c c

c 
c  c 
 c  c   c /c   2c 0c 
3 
c c
  c 
c 4c / c c c 

c   c c 5 2c c * 
 c
 )c
 c
c  

c c  4
c c c 
2c c ./cc. c 0c7 c3 c
  c cc 5 c
c

c
c$cc ( c 4cc5   c
c
c./c/c c (2c3 cc0c   
ccc c c
c c

c c
c   )c  c  c 1c 8/c c c  c  (c
 2c c c  c  c  c c  

c 5 0 c 1c   c  c
5  c  

c  c   c 4c  c  c c c c 

c 5 0 2c
 c c 55c9ccc * c-$.c 6:c-c/cc *c
c c.; 6c
-c  c ; .c  5
-c 
c  2c c ./c .c 
c c c   c
 )c
 0
c c c 
 c .  c
c 

c ./c c
(c c
 ) c
c  c  *c c c
c <  c < c 3 =c c c ./2c  c
c /c
2c /c  c   c c c 

c 1c 8/c >c
c  ?c
@ c c    c c  
 c /c  c
c  . c 
 2c .  c 3 c c
5( 2c
 cc  *c  c/c cc  c3 c 4 cc  c1c./c
>  c
c ./?c
c c c  6 c c  c  c  c    c  c
*0 c 3 c c c  c
c 

c  5 c  c   2c  c  c c c
< c cc
 cc  c c c . c /c  c 
c
 c c * c 
c c 5 c   c 3 c   2c   c c  c
c


c * c c
 c 
c   c 3 c . c A  2c  c c
*  )c
c   c c  c c   c c c 2c  3 c c c * c
 Bcc
$* =c< cc8/2c3 cc c  c
c8/2c(c
* c0c 5  )c c c
c  c. c0c5 cc3 cc  2cc
c  c c 7 c
c 3 c 1c 5  )c   c c  c
c c
c 
 c c
.  c
c3 2ccc
c
  cc )c
c c
cc 
c c
c c/c
c
c   c  c  c c  c  c  c   c 
c 'c
c c 7 c
  c3 c cc c
c
 c5  c 5 c
c c /c3 c9c c
3 c
 * 
c c

c < c c  c  
c c  
c 2c c
 c 7c *c
c

2cc c.  c3 cc c c   c
c  c3 ccccc. c
c   c c c9c c.  c /c
7 ccc. c
c   c
c5 c  cc3 c3 cc  4c  cc5 c

c  *c 3 c .c 


2cc * 2c c 5 c 5  
c
c c  c 5 2c /c
3 c  c  c  
 c 
c c   c 3 c c 0c  
c  c c c   c
 c c c  c * c
c  
 c c 5  )c  *c  c c   4 )2c
 cc    c(c cc  c   c c  * 

c/c c

c c
 c c  c /c
 c c/c  2c c c7c cc
  c
*
c
 
c

c  !9c
" #$ !c cccccccccccccc-
c

$Qué es un HoneyPot?

@ c c    c c  


 c /c  c
c  . c 
 2c .  c 3 c c
5( 2c
 cc  *c  c/c cc  c3 c 4 cc. 6 c1c./c
>  c
c ./?c
c c c . 6 c c  c  c  c    c  c
*0 c 3 c c c  c
c 

c  5 c  c   2c  c  c c c
< c cc
 cc  c c c . c /c  c 
c
 c c * c 
c c 5 c   c 3 c   2c   c c  c
c


c 5 0 c* c c
 c 
c  c3 c. cA  2c c
c *  )c
c  c c  cc  ccc2c 3 ccc* c
 Bcc
cc

'c Honeypot es un sistema diseñado para analizar cómo los hackers emplean sus
armas para intentar entrar en un sistemac> 4cc  * 

?c/c  2c   c
c
 c  c
c c c 

c
c =c > c c borrando el disco duro del
servidor)c  c 
c
c  
4c
c  c .  c /c =
c c  
2c  2c
proteger mejor los sistemasc 
c  c
c
5 c  2c c
cc c
 c   c c  c c  
 c )c  7c  c 3 c c c 3 c 0c  
c
  
cc

Tipos de honeypots
9c 
c  5  c
c
c5 c
5 c c c 
c
c   )c cc cc
 c c5  )c
cc
ÿc ¦  cc
c
c Production honeypot]c9c3 c./c3 cc ccc c c

  cc )c
c03 c .c0c  c0c
 c
cc  c

c
cc c9c c  c  *c>c c  *?2c
 c  c  .( c   c *  2c
c 52c  c (c c . c 0c
   c/c0c
*c c c *c  c
c
"c Research honeypot]c c c 3 c 3 c c c  c  c   )c c
 c
c  c /c 0c 
c  c  c  
c  c  c
  c 0  c 5 c  c  c 
2c * =c  
c c  
c
c
c c
c
c   )c /c
c c   c 
2c c c 2c 
2c
  c 
2c  c
c 
2cc
c
ÿc ¦ 
     cc
c
c Compromiso bajo >c  ?]cc c8/c c  cc
<  c
c3 c< c7c  c 7c>CCC2cA$2c$1 $?c .c/c
 c
cc c  *
cc5 . c
cccc5 2cc

c  !9c
" #$ !c cccccccccccccc 
c

c cc c3 c c   c c


c c/c3 c
&c 
cc  c
ccc   c cc c
c
cc c
c c 
 c$1 $2c
(c  cc c c$c
c
  c "#c    
c c *  c
c < )2c  c  0
c

c  
c 3  c  * 

c
c 3 c c   c  
c   c
c c>(c/c   )c
c c/c;
?c
c
c c3 c  
cc cc( c c3 cc c  c
0c
 
 ccc03 2cc3 cc. c
 cc * 

c
c   c/c 4 c
 c=  c
c

"c Compromiso medio >Ú c  ?]ccc cc c  cc


<  c
c c c  c   c
c 5 c 0c 5  
c c c  c
c
8/cc 
c  cc )c
c c/c   c c 
c/ c
c
  )c 3 c c    0c  4 c ( c c   c
c
 c
c
c  
c
c c  c 
 
2c /c 3 c  c c 
c c   c   c
 
c c    )2c c3 c  c c 
D 
c c   )c c
c c /cc  c c c
2c c< c c 5cc c  )c
c
  c  
2cc c 
c  . c c  cc c c
c

c  !9c
" #$ !c cccccccccccccc·
c

c
c
#c Compromiso alto > $c   ?]c c c  c c   c 3 c
 c3 c c  c
5 c  2c c3 c   4c c c c c
  c
c

c>c$ c ?cc
c
c c
c8/cc /c   c cc c/c  c c
c
c
c c   c*c c c  4
c/c3 c
 c  c  cc3 c c c c c ccc 
c
 c
c
c
c c cc4 c
c
c  5 c3 c/cc
c 
  c c c  c cc@5 *Bc /c
 
c  c   4
c  c   c  c  c
c   c 
c c   c
c  c
 
cc c
c

c
1c./c c c
 

c
c  c/c 2c. 
c
5( c c   )c
 c/
 cc
 c ccc./c/cc
cc
5 c 2c

c
c
c  (c  ]c ./c
c -*c   )-c /c
c -c   )-c c
 (c c /
c c 
 c c 3 =c  c
c ./c 0c  *
c 
2c  c
5 4c /c
* 

c 1c   )c
5 c c  c
c   

c 3 c c ./c c

c  !9c
" #$ !c cccccccccccccc"
c

  c  c c  c 1c ./c


c *c   )c  c c   )c
  
2c  c  *c 7 c  
c   c /c  c   c 1c
  

c
c  c c   c   
c c  c
c   )c
c ./c  c
2c c   c A$c  
c  .
c c c   c " c  **c  0c
 
c c cA$cc **c   0c c 
cA$c
c1c
c
c c./c
c*c   )cc c 

2cc./c 
cc c
50 c
c   4 c/c c c c c( ]c cc cc  c c5; 2c
 c c  c   c /c c   c c   c /c    2c /c
 c 3 c c   c
 c c(cc

c.(c
c
c  c  cc- c
c/-c. c3 cc   4 )c
c=cc /c50 c c
c / (c
c c   4 c   2c c   c  
c   c c c
 
c c   

c
c  ]c c  c   c  c  c c  c   c
c

c  
c   c c
+ c  c  c 1c   c
c
c c
./c
c *c   )c c 3 c   c 7 c 5  )c   
c /c c

+
cc   c  

c  2cc  c 
c)c 
c c.c.(c
$* =c c 50 c  c c  c
  c c ./c
c *c   )2c  c   c
0c* ccc  )c'c  
 c.0* c 
2c cc
*
c 2c
  c c
  c c
c ./c
c *c   )c c   /]c 9  2c 8/
2c /c
EA9 cc
c
c
1c ./c
c c   )c c
5 2c =c  c c  c
c/c3 c  cc   4 )c
c c  c/c  c c 
c
c  
2c c
c c c . 6 c c c 9 c 3  c c ./c 1  <c  
c c
 
 c A$2c 
0c 3 c  c c 

 c  c 1  <c /c  c c 

 c
 
 c A$c 1c c
c
.c  )c c
]c   2c 
c   0c  
c


c
c 5  )c
0
c c c . 6 c  c c c c c     2c

0c  
 c c c < )c
c  c   

2c 3  c c

c 6 c
 c.c c   c
c%c1c 
ccc3 cc./c
c
c   )c c  c   c
c  *c   c 3 c 
0c c  2c c
  c
cc c c c*  c3 c  c
cc  

c  4
cc
  c c c  c
c c   )c   c c   c c  
c 'c
< cc
ccc )c c./c  )c 
c-* 6c
 -c 
5 
c
c c  ccc0
 c> (5 c  cc 2c ; 6cF c  ?c
c *2c c * =c  c c c
c c ./c /c 3 c c  c
 
c   4 cc c  c c c4 c3 cc c  c3 c
c5 c c
cc./cc   2cc 3  cc  )c
c c
 (c 
c 3 c  c c  c
c
+ c  c  c 3 c c c
./cc 2c./c
cc   )c 
c.  c
cc3 c c
c*c
  )c  
c .  c /c  .c 02c  c  
c  c 0c c  c   4 c /c
 c c
c ./c
c c   )c c 9/ c  /c 9  c /c c
8/c
c

c  !9c
" #$ !c ccccccccccccccÎ
c

a     

 c ./2c c 8/


2c c )c  c   c  c 3 c * =c  c c
9 c &  c c  c * 2c 8/
c  
c   c  c c   c   2c c
;*  cC Gcc c 
 c 9c1  <c< c c cc  c
5 c
 c   c   2c c ./c  
c   c  c c c 
c < c  c c
./c c c  c   c /c   c 3 c c  
 c  
 c
9 
2cc 
c  cc c (5 c /=
c c/c  c3 c
*  c c 
c c  c /c   c 3 c 
c 3  c  
 c c  c 8/c
c
cc c  c 
cc  ccc  c 
c 
c c
 cc  cc c  c 
2c 
c 
c cc  c  0
c /c
 
c  c c  c   c
  
c  c 2c  c  c c   c
 
c c ;*  c /c 3  c 3 c  c ./c  c  c c C "!!!c  
 2c
 c
* 0c  cc   c
c c9c;*  2c/c cc c
c c1  <2c

* (c  cc   c


c c;*  c .c1c/ (c
cc./c
 cc9&c
cc c c./c5  
ccc  )c cc

c> cc. cc8/
?]c c)c ccc c
c  2c c3 ccc
 c
c 6c
cc9 c c  4c  c5    c c
   cc9&c
c c
./2c .c./c 
 0cc  c
cc9 6c
c9&c cc

c =c

c c ./c 8/
c 5c c  2c  
c c )c c   c  c
 
c * =c c  6c
c 2c  0
c c  c 5  c c  c  c
  c c  c
c   )c /c 5   )c

c c 3 =c  (c
c ./c
 c c  c

c
         cc
c
H c/c 
c c  c
 cc c
c ./c  4
cc c
  2c c   2c  c  c 2c < c  c c 
c  / c
c ./c 3 c
  c </c*  c> </?2c  c;*c> c..?cc
c
Ubicación
1c *  )c
cc8/cc c c<  4 c c5  

2c/c3 c
*
cc
 c  0  c  ( c c c *  )c
c
5( c c   0c c c
c
 c   c c c c c c
2c c c *  )cc
 
c  5 c
c* c 3  c< 
c cc
 * 0c/c  0c
c  c cc
c
 c  c 
c
*c  c c c 3 c
*c   c c c c
c  c 3 c
c /c 
c> 
 c CCC2c 
 c
c5 . 2c 9I?c/c   c
3 cc  5  c c c c 

c
c

c3 c 
c /c<  cc   c 
c
>A ;2c9I?c
c
$ 
cc c3 c c8/c 
c   cc c c
 )c
c c
 c c < 2c
*c  c   c c c c  * 

c
c *  c

c  !9c
" #$ !c cccccccccccccc
c

8/c  c cc


 )c
c cc c  
cc  c 
c
> cc c 5 
c c c cc ?c
c
1c * *  5(c  
c * c  c  c *0 c 

c c *  c c
8/c7c  c 

]c
c
cGntes del firewall >cc 
?]cc  4 )c  c  cc  c
c
c . c c c  )c
c 8/c c c c   c 5  c
c c 4c
 
c  c c 5 ;2c  
c  c  
c  c  7c  c
c   c  c c c
c
  c 
c
c

c *  )cc  c c c c


 ccc 2c c3 cc5 ;c/c
c  c
c5   c c c
c 05 c  ccc

2c* 
c 4c c

c c   c/c


( c /c5 *c* cc 

c/c 

c
c3 c3 c
 
c  * c  c 
c
c

0c c c 5   )c   c c  c
c  c  c
c 

c
c
  c 
c >9?c c  * c 3 c c c 8/c 9 c * 2c < c c   c
c
  c  .c 05 c
*
c  ccc 5 

c3 c5  cc8/c c c
 
c
c
 3  c c< c 0cc  c3 c  c/cc  0c c c  c

c .c
c*
c/c ccc5 . c
cc c c
2cc *  )cc c
c
 )c
c c  c
c
"cDetrás del firewall >r $ c$ c 
?]ccc )2cc8/c3 
c5 
c
 c c c
c 5  
c
c 5 ;c  c c 
cc 3 c 
5  c c c  c
   c7c c
c cc  c8/c c *c c< 2c/c cc
 c 
2c c  
c c c  c   c
 c
c   c 
c

c   cc c c3 cc cc8/c cc 5c c  c

c
c

c  !9c
" #$ !c cccccccccccccc
c

1c *  )c  c c 5 ;c c   c c


 )c
c  c  c (c c
5 ;c c 5  
2c 03 c 5 
c  c  c c  c c   c  c
< c
c

9 c* cc   


c0c
 *ccc c 

c
c c
c

c
3 cc  0c c c
c

c
c  c 
cc>A ;2c9I?cc  * c
3 cc8/c/cc 

c
c  cc c
c  c 
c  cc8/c

cc c
c5 ;c< cc c
c*3 c
c 2c/c3 c c c c
 c   cc c
0c(c * cc c3 cc
c  c 
c
c
8/c  c  c 3 c * c c c  c
c  3   2c c  c c c

 )c
c c  ccc  * 

c
c   4 c c
 )cc< c c
c8/c
c
#c En la zona desmilitarizada >c Ú?]c 1c *  )c c c 4c
   4
c
  c c c
c  ccc ccc  c 
 c
c 
)c c
c8/c/c cc c   cc  c3 cc+
c c 2c /c3 c c c 5 ;c
3 cc(c
c c
c  c 
c c
c

c  !9c
" #$ !c ccccccccccccccô
c

c  3   c c   c  c c  * 



c
c
  c 3 c < c c  c
c c c  5   )c
c  c c
c5 ;c c3 cc  ccc
4c
c c7* c
c

0c  cc c
c  c c  c
c

c/cc  c3 c
 c c  c 
ccc cc  c
 c ccc
c
1c
 )c
c  c  c c c c
*  
2c  c 3 c c c   c c
 cc
c 
c3 c  c1 c c c  c c 
 0cc8/c9 c
* 2c

cc 
c c c3 cc *c 
 cc8/2c cc3 c c c
 c3 c c  c  c 
 c7* c c c c< c> c c
 c?c /c **c *c 
c
 


HoneyTokens

*c+ c3 c 3 c. ) cc.c 


c )c c8/c c c


 2cccccc  2c c3 cc c
5  )cc
 c
ccc
   )c
5  =
c c c  c
c 
2cc c c

 cc  c5( c
 c
c
c c  c 5 2c 
c
5  c 8/6c c @c  c  
c c 
# c
c%c  c& 'c( 'cc$ c c)
'cc) c c
 
c c *+c

c)
  c
c 

cc c


 Bc
c
c  c
c @ 5  )c 5Bc c (c  c c c  2c  c * c c

  )c
c8/6c cc"!!#c
ccc
c  c04c
c cc c
 c
c
  c
ccc c
c  c
c8/c
c

c  !9c
" #$ !c cccccccccccccc†
c

'c 8/6c c c  c 3 c   c 3 c c   4


c c  

c c  0c
c 5 c
( 2c/c ccc   4 0c7 c c c
c
&* 2cc  c
*c  c
c 3  c5 
]c
c
c c
*c c c c c5  c
c  c c3 cc  cc
  c
c
"c*c c   cc c cc* cc3 cc cc c@ Bcc /c
5(cc c 

c c c5  c
c

cF    
c
c
c    ( c  ( c
*
cc c  )2cc 5  cc cc
/c    ( c 3 c c 8/c & c    ( c 3 c c . c  c c c
 c3 c  c   4 c c  c

 2c c  c
c 7c 2c c
 c5 . c 
cc#c  cc c7 c
c c 
cc*c c c
c 5 c8/6c
c
'cc
c5   c
cc=  2c  cc  
c c7 c
c c

c =
c5c> cccÑ Ñ Ñ?cc  c*c
c
cc7 cc
7 c/c cc
c 3  c  2cc  *c/c
c
c5 c c 
 0c
  cc=c
c
9 c   c    c   c  c  c c *73 
c
c c 5  )c
 
c cc 
c> cc9ccA ;c3 c< cc3 c?c/c
c
c cc  4
c
c
'c  c  c   0c
c  c 3  c >c   c 
?c 5  )c  *2c
cc3 cc
0c
  c cc c8/6ccc c c   c c c
c
   )c 5 
2c cc.c
c
  c.  cc c
c c
  c3 c   7c cc
c
cA  c
c  c> 
?c
c
*c + c 3 c c
 )c
c c 8/6c 
c  c   c 
2c c  c
  c3 cc./c
c  
2c c* c(c *cc<  c
c c
  c 
 
cc
 5 cc c c  
c'c 4c
 
2c c

c  c>92c5 . c
cI?c
*c * cc * 

c c
cc
 c
c
WI-FI Honeypots

 c c 
c
c    c 5  c <
=
c c  c  c
   2c     c/c  c
c   )c.cc
c
c cc  c
c
c cc* )c c c  
c.c 
cc c  )c
c  c
c
 c
c *c3 c * c
c c
c
5 c/c  5 c
c
9 c * 2c c  D

 c
c  c  7c  
c c
c
c  c
 
c c 3  c   c /c c 3  c . c  2c  *  (c c   c  c

c  !9c
" #$ !c ccccccccccccccÑ
c

    c0c  
c c cccc    2cc 
c 0* c
>  c A?c
c
&* 2c c 
c
   c c c
c  4
 c 3 c c  c < )c
c c
=5c) c.c
ccc
 c
cc 
c c. c  c/c< c
 c0
 c
cc3 c  cc    c ccJ!" *c/ccJ!" c
c
c c c 3  c 
c
c    2cc cc  4
ccc3 c
  
c  c . 6 c 0c c c 
c
c
(c 9 c * 2c c   c
c c  c
cc

cc
 c
*
cc c5  c
5  ]c
c
c1c0
 c/c 5  c cc c
c 
cc@ Bc/c c *
c
c  c3 cc  4c c c c  c42cc<  c
c 
5  2ccc
c    cc5c
c  cc*c **cc c
5 cc
c0c   4
c cc c c* c ccc c
c 
c
cc
"c  3  c c c  c  0 c >c   c c c ?c  
c  c  
 c
c
5 c 5 
c c   c 
c 0* c c
5  c
c  c  c
c 
2c c
  c  c 5( c  
c c  c 5 
c c c 0 c  c 1c 3 c
 
c c
c 3  c  c
c
#c1c/ cc
cc 
c c. ccc 

c3 c  cc c
* =c 
c  cc  c  2c/c3 cc c 
c c * 
c
c *  )c
  c  4c c3 c
c
1c   4 )c
c 8/c c c 
c 0* c c c
c c 7 c   c
3 c c 0c  *
c c =< c c 
c '
c   c c   c WISE
>&  c 
c c(  ?c
 cc   )ccc c
c
Repercusiones legales

8c . 2c c c


5 c ( c
c c  *c c .c  
c
5 c
.  c /Dc  c 3 c   c
c c 5 c c  c   c c 

c
c
  c 
c
c
cc cc  0c* c> c3 cc0c0c
cc  c
cc
 *?cc   cc3 c 
c   cc c
c8/c*c
  c
3 cc  c(c. c 5  cc )
c
c/c  2c/c cc &c
c  *c c +c c c c 9 c * 2c
*
c c c  (5 c
c c 
c
'
c
*c
c c
cc c  Ic
c
1c /c   c >c  c 3 c c  ?c  c c  * 

c
c c
   c c>  cc
?c
c c5 c /c cc
 c
c
  )c c *c c 3 c


c
c  c
c 8/c 3 c   2cc

c  cc /cc   c c c
c 5  )c * c  c c3 cc
/c c<( c

c  !9c
" #$ !c cccccccccccccc-
c

c
$c/c cc.c< 
c  2cc8/c
c 
)c c c* c
 .c 0c  c >  c   c 
?c 3 c c 8/c
c   )c c > /c
 =c c  c c  c c 5  )c
c c  c c c  *c  c
 
 D
 c c   c/c=  ?c
c


c
c  
c
c 5   )c
c   c 8/2c 
c @  Bc c
  c /c    c 3 c  c   c  c
 c
c   c 8/c
>. c  c 
cc. cc  c8/?c/c

c  c8/c. c  c
c
  c c c @ Bc
c c    c 3 c  c c  c

c
  c 
c . c   c   c  c c  *c c  
c c    )c
 c  c c 7c c
c  4 )c cc
c
c  c c 
cc  c  cc c
   c c 
c
 c  

c/c cc c
c
c
c2c
c*  c3 cc3 c 3  c c c
*c 
 ccc
  c  ]cë $Cuál es el objetivo de mi Honeypot? »

c3 cc  cc7 c@  c c 


Bcc3 cc@   cc


c
cc
 Bcc@   c 5  )c
c *c3 cc=  c  Bc 
c

 c
 cc
 c c c
c
1 c 9 4 c
c c  *c * 

c c
 
c
c c
cc
8/c c  c  c *0 c >* c   
c c  c
c /c
  ?]c
c
c Trampa >
 ?]c c c   c  4
c  c c  c  c >
c
  ?c
c@ 
Bcc cc  c c c  *c cc* c
c   cc
 )c
c  ccc c
c8/2c 3 cc cc c 
c
 c  c  c  c  
c > c 3 c c  c
c c  c  ?c  c c

c   c 
c c   )c c c 8/2c c  4c   c
 c c * c
c 8/c c  * c c 3 2c c   c 5  )c  c


 ccc c
c8/c
c
"cPrivacidad > 
?]cK cc8/c  c 5  )cc *c9 c* 2c
c 5  )c  
c  
c

c c 5  )c   c >


?c c
5  )c
c 
c
c
1c 5  )c  c>, 5  )?cc. c 5  ccc 5  )cc(2c
 cc c
cc cc
 )c2cc5 .c/c. 2c c
cc *  c
cc
3 cIc
c
1c 5  )c
c 
cc  c c    )c3 c  4c c c c
  c   c c c c * c
c
*c >/c * =c c
c c 8/c
c
  )?c1c   )c
c c    )c 
ccc 
c  c3 c 
c

c  !9c
" #$ !c cccccccccccccc 
c

   cc c c



 cc c  4
c/c **c cc 3  c
2c
cc  c0c
c 
c3 cc
* (c   cc
c
  c/c
  c > 
 ?c c c 

c c    )c c 
c c 8/c 9 c
* c c c < c
c  *2c /c 3 c c . .c
c 3 c c c  c c
  5 c3 c c c ccccc
c
LLLLLLLLLLLLLLLLLLLLLLLLLLLLLLLLLLLLLLLLLLLLLLLLLLLLLLLLLLLLc
Lc%cA&%c& $ ' M]cLc
LcLc
Lc$. c/c c5 c.c c5c . 4
c  c/cLc
Lc/c  c. c   c/ c c  cc. cLc
Lcc5c/ c   /cc. c/c  
c
cLc
Lc  
cc. cLc
LLLLLLLLLLLLLLLLLLLLLLLLLLLLLLLLLLLLLLLLLLLLLLLLLLLLLLLLLLLLc
c
#c Responsabilidad >
?]cc  c . c 5  c c c  *c

c 3 c

c  * ccc c
c3 c c c   c  c8/c c5 c
c
4 c
c3 c
1c

cc* (cc3 c cc.c  4
c c( c5  4c
c


c c   c 
2c  c 3 c c   2c 5  c c  c c   c  c
 c 3 c c   4
c c 
c  c
c 3 c NK =c  
c
c * 

c c

c c c c  c  c c  cc OcNc  *cc   c
c c
c

c 5 0 Oc

’ENTG GS Y DES’ENTG GS DE HaNEYPaT

’entajas:cc
c
1c./cc c  c  (*c 2cc c5  c c5 4c /c

 ]cc
c
Pc Conjunto de datos pequeños pero de gran importancia:c 1c 8/c   c
3 +c 

c
c 5  )cc  c
c  c cM*c c
(2c c)c c*c

c
c c
(cc4c
c  c !!!!c c c
(2c 
c  c)c !c c
 c
(c % 
2c c ./c )c  c   

c  .c /c 3 c 3  c
  )c c c./cc /c **c  

cc  4
cc c  

c
 c   c
.2c c ./c 
c c -
-c   
c )c
c

*2c
c c 2cc 

c7 c c- . c-cc  5 c
3 cc .c0c50 c>/c* ?c
c 4 cc
c3 c c./c  cc
c
* Nuevas herramientas y tácticas:c 1c./cc
+
c c   c 3  c
c3 c   7c c=2c   /
c.  cc0  c  c c
c
* Mínimos recursos:c1c./c 3  c ( c  2c)c  c  

c
  c c   5 c 3 c c  c  c c "J*c
c %c  
c  c
50 c c c 
c ccc c 
c&, "cc
c
* Encriptación o IPv:c c
5  c
c c / (c
c c  (c  c c 

2c

c  !9c
" #$ !c cccccccccccccc·
c

c c  c 92c ./c  *c * c c  c  
c c c c
 cc3 c c- . c -c  c . c c./2cc ./cc
  0c/c c
  0cc
c
* Información:c1c./c 
c   c 5  )c-c 5 


-c c 2c
 cc3 c< c (c3 ccc 4 cc
c
* Simplicidad:c A 2c c ./c c   c  c c ./c  c 3 =c

  c  c  2c  c c *c 3 c  2c c 5 c 3 c    4 c


  c0c ccc (2cc * 

c
c  cc
 5   c
.* 0cc
c
Desventajas:cc
c
c c 3  c  c  (2c c ./c * =c  c  c
* 

c c c

*
cc3 cc 4ccc  c (2c c3 c *c cc< c
c
Pc ’isión Limitada:c 1c ./c  
c )c   c /c   c   

c 3 c
  7c
 c c c 1c 8/c c 
0c   c 3 c c  c
 c  2c c c 3 c c  c c c 4c   7c c c ./c c
 c cc
c
Pc Riesgo:c $
c c  (c
c 

c  c c c 1c 5 ;c  c c
c
c 3 c c  
2c c   )c  c c c
c 3 c c 2c  c
9c  c c c
c 3 c 5c c
  c 3 c 1c 8/c c c
5 2c
 c c c * =c  (5 2c c ./c  c c c
c 3 c c

 
c/c  
c cc- . c-c/c3 cc   c c
+ c c c
c c c  
c  c c
5 c ./c 

c c c  c
c ./c
 
c .* c c c c / c c c
c c 5c
c  c 92c   c 3 c c  c
./c 
c3 c./c3 c5  cc c   )c ( c

Utilidades de Honeypots
 (5 2c )cc 
c  cc./c'c4c02cc
c  (c
 2cc./c 
c c 
c c ) c 
 cc
c   )c
 
c c   4
c c  ) c  
 2c c ./c 0c   
c c
  4 )ccc 
cc   /2c  )2c
 )ccc/
cc  4 c
c 
 cc c3 c 
cc   4
c c ) c
c   )2cc./c
c   4
c  c    c 5  )c 1c   c
c c 5  )c

c
7c c   4 c  c   4 c 3  0c 
 c c 
 c
c c
  

c . 6 2c   c  c  0c  
c c c  
)c /c   )c
 
2cc c 5  4c cc 2c ./c
c *c   )cc   4
c
c  ) c  
 2c   c ./c
c c   )c c   4
c c
 ) c
c   )c9 c* 2cc
c c
c./c 
c5   c c
*c  ) c  
c c   4
c c  ) c  
 2c ./c  
c
  c   4 c c c  c 5 c c  c  ]c   )2c
 )c /c

c  !9c
" #$ !c cccccccccccccc"
c

 )c F c c 0c  5 




c )c c ./c  
c  * c c c  c
5 c 5 c

1c ./c  
c /
 c c   c 3 c c  c 5 c c   c c  c
3 c   4
2c c  c >; ?c c  ,  c c 3 c c *
c
c .  c 3 c  c  c >
?c 
c  c *  
c  c
  *c 9 c c  c   *c c   
2c c .  c   4
c
  0c/c 0cc c> c c3 cc ,  2c  0
cc(c ccc
(  ?c'c
cc=
c c  c
cc3 cc*
cc

c
c c
 c /c  c
 c 1
c - 6/c ./-c >$ c
c  c
--?2cc c   cc ccc   4
c 
c c c
c 
2cc./c   7c c=c /c
  /c c 

c
c3 c
8 c c   4
c c  

c
c  c $2c c  
c c -C 
;c  4-c c
 cc 
cc cc c
c
c c   ccc< c c* cc


cc c  cc
  )c
c c3 c.c 
ccc 
c  c
'cc
c c 6/c./ccc1 c$  c1c-8/c-cc0c
 c    c  c  c
c *c   )c >.c 
(c 0 c
 c -c    -2c /c 3 c 
c c c 

c 3 c . c  c c
 ?c8/c 
c* =c  c c  4 )c
c  
 c. c
c  cc  c c+cc
  )c1c
cc 5 
cc 2c.  c

 cc c /c  c    
c c ./c  c2c c  4 )c
.* (c
 
c c   

c
c  c /c 
(c  c  c   c /c
 c c
3 c8cc 
c
 c cc0c0]c c c c*c3 c c  4 )c0c
  4
c./c cc*c 0ccc c./c/c cc c
( 2c3 40cc 
c
c c  
c c./c/c

cc  c cc
2c./c
 
cc c'cc
c./c
+
c c.  c2cc
c  c$6 2c c./c
c*c   )cc

1c 
c5 c cc c./c 
c/
 cc  c c  4 )cc c

c
cc
 )c1c
 )cc ( 2c c ) ccc
 5  )c
c c5c
c  c  c c   )c c  c 0c  c c c   4 )2c   c .* 0c
5c  c c .* c 0c  
c c c   c  
c c  2c 
0c
0
c   c c 2c
 =
2c c   
c c
+c 3 c .  c
$ 
2cc
 )c.c
c< 
c
5( c
c.  c$ (c c
 c 9c /c  c
c  c .c 
c 5  c  c
 c 4]c M c
 .c
2c  
c  c
c 5c   2c .* 

c
c
  c  c
3 2c /c c .* 

c
c  * c c 5 c  
c c c  c c 1c
8/c c < c c
 )2c 
c  .c
c c  *c
c c

 )c 0 c1c./c 


c5c  2c  
c3 +c 

c

c
c
c  c   2c  c 3 c
 
c c  c < c c
. 
c ) 5 2c/c *cc5 c 
ccc cc
0c 
 c
0c  c
cccc *c8/]c9 2cc55  c  cc 2c
./c
c*c   )ccc c )c cc
 )2c. c50 c c c

c   4 c/c c3 c./c
cc   )c/c c c c  
cc

1c 5 c   c /c 5 c  c c c ./c c  


c /
 c c   c c
  4 )c c c c  c 'c 4c 3 c c   4 )c
 c c 52c N )c

c  !9c
" #$ !c ccccccccccccccÎ
c

*c 
 Oc c c c 
c c
c c  
c c 3 c c   4 )c
*c
5  c8/c cc c c 5  )c  c
c3 =ccc 2c )c  )c
c  c c 0c
+c . 4c c c    2c c 5  )c

c   c c c
  

c
c  c c c 8/c
c  *c 3 c 5 c c c  c c

]cc  2cc
cc c  
cc 
c c
  
c

c c 
c  c  c  4
c 9 c
c  
)2c c c  
 c  c
c c
  4 )2c c c ( c 3 c  3 c =c . 6
c c < c c 

c c
 
c
   c /c .  c c 0  c 5 c c  
c 0c   
c c
 4 c c  c  

c   c   c  /
c  c   c  
 c c
 cc.* 

c c 4 c3 =c 
)2c 0c
+c. 4cc 2cc   c cc
 c 
)cc c c
c c 
cc c *cc3 c   ccc c
c
3 cc
  
2c./cc )c
c
c3 cc /c
5( c
   c3 =ccc
3 c . 4c c - . c -c c  )c
c
c c 5  c 3 c ./c c   

c
> c c
c   2c  c
c c
c 2c . c cc*c
c
2c ?c
3 c 
c  c
5( c
   c 0c c c   

c  c
c
(cc
(c /c3 =cc c3 c
. 4c c  c 1c 8/c  
c /
 c c  c *c  *c 8/c
c c< c.  c
c 
 c/c3 c 
c 0
c/c50 c c
 
c
c c 
c  c c 0  c 5 c 2c  c c  c c c   c
  c
c 
c c
(c % 
c 3 c c 7 c   

c 3 c  
c c
./c c c  
c c c  2c /c 3 c c c   4c 
2c < c
c
+ c cc c1c   c
cc./c3 (ccc 0
c c
cc
5  )2c  4
c c  5 


2c c c   4 )c 3 c c   c  c 
 c
0
c /c 5 c c c 
c c  2c ./c
c c   )c c c
 c )c cc  c c   cc c  2cc  c   c
c 5 


c* c3 =c.  2c )c   2c/c3 =c.  c   4 c cc
* )c
c c  c
c
2c c    0c c 

c
c c ./c
c c
  )c

     

1c  c
c
 )c
c  c c c c  c /c   c c c
5   c
c 5  )c  2c  
c c c
c c c
 5 ccc 
cc c 2cc9c  c c c    )c
c
c 
2c 

c
c c  )c 
2c c 5  )c   c  0c .(c /c
 0c  c c
   cc 4c
c 
c/c c5 c


02c  
c  c   4
c  c   4 c *c  2c
  c * c
   c c   c
c   c )c c c  c 
0c
c c
=  2c c  c  
c  c  
c c .c 

c c c c 
2c c (c c c

5  c c cc   c c 



cc   cc 2cc
0c 7 c c  
c c 
c >
 *
?2c  c  c c  05 c c c 
c
c 3 c
 c /c c 3 c 2c c 4c
c  c 
c 03 c c  *c
* c
c3 cc7 ccc3 cc.c
c. 
c

c  cccc
3 c c c2c c c  c c  ccc   c  c

Demasiada información:c'c
cc *c  c
cc9c 
cc3 c
 c c   c  c
c  c c c c
c c -
-c  c  2c

c  !9c
" #$ !c ccccccccccccccô
c


c
 
c  c /c c  c   c c
c  c c   2c c
./c   cc
c7 c 
c c   7c cc1c c

c 3 +c 5  )c  


c 5   c /c .  c 0c 5 c c * c
c
 5  c c
  

cc  4
c/c  
 cc   cc

Falsos positivos:cK 40cc / c   c


c c9cc3 c  .c
c c c
 
c c 5c 1c 5c   c c c  c  *c   c  c c
  4 c 3 c c  .c  c    4
c  c  c 9 c c 9c c
c 5c   2c c 
   
 c  c 4 0c c   c
c  c 1c ./c* c c  *c  3 c
c   

c 3 c c  c c
cc c
5  )cc  4
cc. c3 cc  4 c 
4 cc c
5c cc3 ccc  cc

Falsos negativos:c 1c  (c 9c * =c  c


5 
c  c
 5  c c
3 c c   c
 
c 
02c 
c   

c c c ./c c
)c. 
c3 cc
3 cc3 c cc  c
 
cc

Recursos:c 'c 9c 3  c


 
c  c
c .
; c  c  c c  05 c
c c

c
cc  4 )c 
c c 
c cc

c/c c0c 5  )2cc
9c  c 3 c   c  c c 3 
 c 4
c >
    c 
c c 5  )c
* =c

c .c  ?c1c./c 3  c  c( 2c   cc
c  
c 
c c  
c c 1 c 9 4 2c 5 

 c
c  / c 8/2c c
 
c   4 c c  
 c c c "Jc*c
c%c c   c c
c

 cc

J c
9 un conjunto de Honeypots'c(c* c0c 5  )c c c
c  c. c
0c 5 c c 3 c c  2c c c  c c 7 c
c 3 c 1c 5  )c
  cc c
cc
c
 cc.  c
c3 2ccc
c
  cc )c
c
 c
cc 
c c
c c/cc
c   c c cc c c c  c

c 'c
c c 7 c   c 3 c  c c c
c 
 c 5  c  5 c
c
 c/c3 cc

9c  c 3 c
 * 
c c

c < c c  c  
c c  
c
2cc c 7c *c
c

2cc c.  c3 cc c c
  c c   c 3 c c c c c . c
c    c c  c 9c c
.  c  /c 7 c c c . c
c   c
c 5 c   c c 3 c 3 c c  4c
 cc5 c
c *c3 c.c
2cc* 2cc5 c 5  
c
c
c  c 5 2c /c 3 c  c  c  
 c 
c c   c 3 c c 0c  
c
 ccc  c c cc  c* c
c 
 cc 5  )c *c c c
  4 )2c  c c    c (c  c c   c   c  c

c  !9c
" #$ !c ccccccccccccccô
c

  * 

c /c c
c c
 c  c   c /c
 c  c /c
  2cc c7ccc  c
*
c
 
cc

8 ) 2c c4c


5 
cc  c
c8/c/c  4
cc  c
 *c c=< 2cc  cc< )c
cc  c
c

c
5  c c 8/c c @c c  c c  ,c  -
  c c
c  c

  c  
c  .
c 

c 
c  
/c c 
c  /c c

/c c


 ,c0
c  c c
c
# 
'ccc c c
cc
 c  
,Bc
c
c c53 c  ccc5 c
cc+ cc c *c c> c c
.  c  c 8/?c  c 3 c c * c   c c   c 5  )c @ Bc
c
)c 7cc cc c c
c

c
c
 c  c c  c c > c  c 2c c c  c   c
c
  ?c/cc    2cc
c c 5   )c
c 
c( c c
c c
c
c

c
c
&* 2c c 
c .c 
c
+
c  c  c  
2c  c c 3 c
*c  c
 
c
c5 c c/c  
c
cc
c 
)c
c
 c c
2c c  c* ccc
c.  c  cc c3 c0cc c 
c
@ B2c
*c+
cc
 cc3 c 5 c c 3   c@ Bcc
3  c 
c>
 c03 2c
 c c  I?c
c
'c 8/c  c
c 3   c *0 c  c  c c 7 c /c 3 c c
  cc<  )c
c 5  )c c

c  !9c
" #$ !c ccccccccccccccôô
c

Honeynets ’irtualescc

1c 8/c F  c c c  c


c c  (c
c c 8/2c /c c
cc c7 c c1c8/cF  ccc c c  2c
c
. .ccc  c  c
c8/c/cc c
c c5 c
5 cc

c  )c c c7 cc/c


c  
c cc8/c
 
c 1c c c c 

c /c 0c 50 c 2c /c 3 c 
c 0Qc
* 
cc c7 c c9 c* 2cc 

c* =cc cc

  2c 0c   
c c 3 =c  c
c  c   c  
c  c
*
c c
.
; c /c c   c   c 9 
2c c 8/c   c  c c 2c
 (5 c 3 c c  c  
c  c
c   c   c /c  c c  c
8/2c0
cc  c
c c
cc/c
c c
ccc

8c


c c 8/c F  c c
c  (2c  ,
c c 8(*
c
5  cc
c
5 c c

cHoneynet ’irtual Guto-Contenida

'c8/cF  c ,


cc c 
c c8/c 

cc c)c
 
 c 1c 
c  c 0c   c 
c c c 7 c /c 5( c  c 'c

c 8/c ( c  c
c c  5 c  c  c
c c /c  c
c
2c/cc./c
 c
cc8/c cc
cc c
c8/>?c
  >?c]cc

ÿc  *2c c 8/c F  c  


c  c   
c c c  0 c /c 
c c


c 3  c c 8/c   c
 )c c 5  

c c c  6.c
 5 ccc
c"!!"cc
ÿc  c/c2c 
c  c c03 c/c c   cc 3  c

c/c 0c  
c c  ccc
A$
cc. c3 cc  )cc
0c50 2c/c3 c5( c0c 
c/c  
c c)c cc
ÿc  c c
 c /c c  2c 9)c   c c  
 2c (c 3 c 
c  c
c
c.
; cc

8/c c
]c

ÿc H c c
c5c9 cccc cc.
; 2cc./c cc3 
 (c
 c5   cc
ÿc  
 c
c c 

2c  3 c c 8/c  ,
c )c
3  c c  
 2c 
0c 3 c  c c  c c 

c
c  c
5   )2c 
c   c*c c/c  
 cc
ÿc 9

2c /c 3 c 
c  
c  c   
c c  c .
; 2c ./c   c

c3 c c c 
cc c c
c c .c

c
c5; c
  2c3 c 0c
 
c cc

c  !9c
" #$ !c ccccccccccccccô†
c

ÿc 95; c1  
2c/c3 c
c c3 c  cc c03 2c0c  
c
c 5; c 3 c  
c  c  c 2c c
5( c   c c &9c   c c c
  
 ccc

Honeynet ’irtual Híbrida

'c8/c8(*
cc c *  )c
c c 0 c8/c /c
c 5; c   c
 c
c 2c c  c c  5 2c /c  c
c 2c c  c c
 c 9c /c   c
c  2c 0c c c  c  
c /c  
c c
  c 
c c c
c   c 9 c * 2c 
c c ./c c
  c 
cc c7 c03 c1cc
cc 5   )c]cc

ÿc 9 ]cc ccc8/c ,


2c< c c  c
c3 cc
 c  
c c  c  c
c c ./c > c c  5 ?c c c
8/c 8(*
2c c 7 c   c  (c 3 c c  c  
 c c  c
./cc
ÿc A< *]c 
c  c c c 

c
c5; c/c.
; c cc c
c
c/cc c
cc
cc 
c8(*
c'cc (c3 c 
c  cc
 c&9 ccc 
2cc c  c <c 
c   c  c 3  c c

c./c3 c3  c 3 c c 
c+
c c  
 ccc

c>
0c
c c03 c cc8/cF  ?cc

 c
c]cc

ÿc c  *2c Rc 3 c c 


c ./c   0c c 0c
c c 03 2c c 0c

5( c cc
ÿc  c c  c /c c  2c 
0c 3 c  c 0c  

2c  c /c
 *c
 c c3 c./c0c
c c  
 ccc 
cc

1c 8/c 8(*


c F  c  
c    c  4 c c 5< * 

c
c c
./c 0 c /c    c   c c 

c
c ./c 
c c 5; c
  c

c  !9c
" #$ !c ccccccccccccccôÑ
c

EN I

$c /c c  
c c 3  c   c >5; ?c c  5  )c 5 c >%Ac  c
?2c c c  c c c  5 
c  c  c /c   c
c
5  

c1c8/ccc  c<  )ccc 2c/cccc
c
 * cc ( 2c< c
c  c
5  
c
c8/c
1c8/c
c  c  )c>EN I?cc    4c c  c7 c
c   c *0 c
c  c
c 5 c
c
c >

c ?c /c  c
c
c
%

c 
 ?c 1c  3   c   4
c  c c  *
  )c c  c  * 
c >c
8/2cc 
c
c 
)cc ?c 
c 5 c c c5 ;c

c  !9c
" #$ !c ccccccccccccccô-
c

c c  3   2c c  c


c 
c c 
c c  4c 
c c 5 ;2c /c 3 c
3  c3 c
c 
cc
c
*cc*  c c=cc   c* =c
c   4c c
c
c  c/c5  
2c c7 c c cc5 ;c
c
c 5 ;c 0c 5  
c  c  c c c
c 7 c
c < c 3 c c
* c c . c
 c c . c 5  c c c 5 2c 
c c 7 c
c
< c

c  c8/c. cc<  c  c c( c *
2cc
3 
c  
c c ( c
c < c

c
c c    c 3 c
c .  c
  c 
c c c  c  2c c   
c  c  c c c
4c < c
 c. c
c
'c 
c3 c  c 3  c c/c7 c
c < cc<  cc c c   c
 c 3  c c9 c* 2c* =cc c c c
 
c 
2c/c
3 c 
c c   4
c c (c
c3 cc c c< c c c
2c
c 3 c c   c < c c <  c   c
c  =c /c  c c c    0c c
* )c
c
c@ Bc>c$ c ?c3 cc  c  c* c
c
c c 5   )2c c 5 ;c c  c < c  c
c
c   c 1c
 c
cc 5   )cc c c
c 
 D
   cc5 ;ccc c
/c  c  c
 c
c 

c < c
c 

c c   c 8/c  c 3 c c c
  4
c c3 cc  2c/c3 cc   c* =c  4 0c c
c5  
c
cc
   c
c  
c /c 
c  c  c
c 5 c
c
c >

c ?c c

*c

 c7 c
c cc c
c  V
c
 
c c ccc  c
c  c8/2c   0c3 c 
c cc
 c
 2c /c 3 c c  c c   c c
c  
)2c   
c 3 c c
5  
c
c3 c3 c< c>  c5 ;?c 0c c5  
c  4
c c  c
9c/cc c ccc5 c 5 4c c  )c
c3 cc c 
c
@

Bc

c  !9c
" #$ !c ccccccccccccccô 
c

c
1c  c
c
c>

c
 ?cc  ccc  c5 ;2c/c3 cc c
  c
c  5 cc /c  
c = c c  * c
c c3 c
c
 
c /c 
c c *c 3 c 3  c  c
c   

c . c c

c   c
8/cc c  2c
*c   c
cc 05 ccc5 ;c
c
1c  c
c  c  c>
Ac +cc  c cc c
cc * 

c
3 cc* 
cc c
c 3   2c/c3 c c   )c
c cc  c@c


Bc  0c 0
c c<  c
c
1c  c
c
cc 05 c< cc   c8/cc  4
c cc c
c

 )c
c  c>9?cc c 3   c
cM cc
c*  c cc9c
0c  
cc  c8/c
c5 c3 c c c
c   cc  

c< c
cc 
c/c c c 7c c c
  c
c5 c> 
 ?c
c
A 2c 
c c 5  )c c c  
c
 c c c 

 c @ Bc
 c
 c 4 cc   c c c. ) ccc c3 cc c
c3 c
c  c   c c 5  )c
c  c   c /c

c
 c c 5 c
<  cc c
c
&* 2c c <  c
c c 

 , =c  
c  c 50 c
 *  c  c
c c9 c* cc 3   cc c
c 
 2c/c3 cc0c3 c 
c
.  cc cc
   cc@ c
Bc
cc03 c 
2c   c/c
 /c.*  cc .c c
c
c c
c 3 c c  c

 c   c
 c c   c  c
c
  c@ B2c
* (c5  cc c c .c0c c  cc
c c
c 3 c   c   c /c    c 
c c c
c  c c  (c  )5 2c
 c 3 c c  c 9c   c
c c   

c
c c 
c /c 
(c  c c  c
9c c c 
cc
c c
c
en II

1c 8/c
c  
c   )c >EN II) c    4c  c *  c 
c c
3  c
cc  c  )cc cc
  ccc5 ccc  c
c
5 c
c
c >

c ?c c c  c >

c 
 ?c /c c   )c
c
c
3 
c 
cc c c

c
c
c

cc c
  c
c c"c>
 c1c
 
?c c 

c
c   )c

c 3 c  c  c > ?c c 



c
c  c . c 5  c c c
   c c3 c 7cc
  c
c 
2c cc  c
c  c c
c < c c  c 3 c  *c  c c  2c c 3 c c   c c c
  c
@   *Bc
c
c. .c
c  c c c
  c
c c"c. c3 cc
  c  4 c
c
 c2c cc3 cc  0c 7c c
c 05 c3 cc c 
c*  c

c  !9c
" #$ !c ccccccccccccccô·
c

c c* *  5(cc cM cc c cM c2cc


 cc
  c3 c
 c 
c c  c
c  
c /c 
c c   c 8/c Honeywallc c
  c  c

c  3 c   c c
  c c c  c 3 c  c
  c 8/c
c c
c c 
c c  )c
c 

c c c 7 c 

c
 c 5  c c  )c /c 
    )c
c c 8/c *
c c  c    )c
c
  c   2c c
 )c  c  c
c c  c c
5 c
 c
c
c c 3 c c c 3 c  4 c 3 c ./c
c 
c >c
c  
)c /c c 8/?c
c)c./c cc
  cc
c c"2c/c ccc &c c
 )ccc
c  5 c c /c 2c c 3 c @  Bc   5 c 3 c c  c
c c c < c c

  c c (c 3 c  c  


c c
 )c c /c   0c c c  c >F ?c
 cc  2c
    )c
c8/;c/c cc  c
cc5 . c
cc
. c c   c@ Bc
c
1c   c  c 3 c  
c c  3   c . c 5  c c  c
c 5 c
c

cccM cc  40*c c  c


cc
c < c

c  c8/c
. cc<  cc5 c3 c ccc 4*c c * c
5 
2cc < c. c
c<  c c@  
Bc
c
c

c  !9c
" #$ !c ccccccccccccccô"
c

c c  
c
c M c 2c *c c  c c
c 
c /c 
c c
c c
< c 3 c  
c  4 2c 

c
c  c  c 7 c c / 2c  c c
 cc( c< ccc8/c
cM cc
c
1c  
c  c 3 c *c . c 5  c
 c c c 5 c c 3 c 
c

 c c c   

c c   4
c

c   c 8/c c   c *3  c
 c 3  c  c
c  c c   
2c 
c 
5  c /c
 5  c c
  

c
c  c c c 5 2c c 3 c c c c
c c 8/c > c 3 c
 
c c/c  * cc ?c c* ccc5  c
*
ccc
5  c
3 c
c  4 cc c c* cc3 c
c
c> c3 c /c
5( c
 
c
  cc ?c
c
c 

c +
c 
* 

c c c  2c 3 c  0c c  c 3 c @Bc
. c c c(  c/c  c c 7c c
c5  cc  c9 c* 2cc
3 c c 
5 
c c  c c
c 5 c 3 c  c   4c c   * 

c
cc
  cA$2cc
 
c c  c c /c 
5 3 cc 3 c
c 5 c3 c c
 c
c
1c 3 c  c /c c @ * B2c  c * c  c 
c c c  c
   ( c+
cc 

c
c c c 9c>M Ac c  c
 ?ccc 

c
c*3 c/c< cccM cc
c
c  c c c 5< *c 3 c c )c   c 
5  c c 3 c 3 c c . c
5  2c c3 c   cc  c
5  cc  c3 cc c* c c c

c c< c3 c3  c  c


c cc
 c3 c$,%9$c
> ?c  
c3 cc c 
c  .4c c c
c  c
c
1c  c
cc  

c3 c  4cc cc 3  c
cc c  
cc
  c 8/c .c  
c  * c c c 7 c +c 1c  c
 c

c 
ccc  c
c3 c
c 
c   4
c cc 5  ccc c
c
998cc 3  c c c
c    )c 5 
c
1c .  c 9E"c   c c  c
c c  c
c 5  )c c  c
c
6 c c  c
c c3 c c 5   ccc
c c ) c
c
c *c
c
c c =  c c c  c c öhoneypots´ o tarros de mielc >/c c c  c
 c   c3 c c. 6 2c cc*
 c@c Bc /c c
3 c c 

c 0c   
c 
c /c
c c   c c  
c  c 

c


 c  ?2c/c  cc  c 
 c
c 
c> 7c' SGc
c $?c  (5 c  c   c c  )c   
c c  2c   
c
   c   c /c  
c c c 
   
 c
c c 
c
c 3 c c 0c
 

c c c
c   )2c c c c ./c  c
c  )c  c   c c
3 c /c * c c
c
c  *c  c 9  c  c c c c
c 
2c  c
0c
  
c c3 ccc 
c c c  c

cc<  2cc  c
c c4cc c
c 05 c  c/c
c
c c = c5  c


c

c  !9c
" #$ !c ccccccccccccccôÎ
c

 c  c
cc 05 c cc c
c3 c5cc c< c> c

 c. 6 c/c
c c c5  cc2cc c = c  c5 
ccc?c  c
   cc 5 c c c  c c c  cc

c . .2c 
c c  c c seguridad para las redes se piensa en routers
(controladores de tráfico en las redes)2c  5 c /c c 9 c
c  )c
c
 c >=c 5 c  c
c 
c
c 

c 

c  c c   4 )c c
 2c  c  c
  c   

c   
2c    c c )c

c c
<  c c   c
c 
c c  c 5 0 ?c c c <c c c c c
 c c 8/c c   c ,
0c
c 
,c *c 7 c c c


c5 4c3 cc  c5  c  c  c
c

c    cc   c
c c  c 
 c c  * /
c c c  )c /c
 c
c estándares
internacionales de seguridad de redescc

c c   

c /c c  4c c  c   c  c c c 
c >8/c
  ?2cc./c.cc cccc< c /c c 5 c
c

c%  c* =c3 2cc
c c cc c
 
c  2c
c
ccc
cT
c 
c c  cA* 0c99c .,c c cc
@ c  c c )c c
c c   c  c c c  
 c
c  c   

2c
 c
 cc
c
c. c/ccc  
 cc)c#c. c
 * c
c
c 3 c . 4Bc /2c * =c c  c 3 c @c #c . c
c   4c  
c  c "!!!c

) cc c  4 )c/c""!!!c cc


*  c  c c c   c  4
Bcc

Honeynets distribuidas

c   c c 3 c c 0c  4


c c c 8/c c c   )c
c  c
   c
c@la unión hace la fuerzaBcc  c cc3 cc  c 
c c
c
c c c  4 )c   c c7 c 
cc7 c(cc c
3 c
c< cc

c
 
c c
ccc3 c
c   cc
5  )c 
c c c8/c
c
&* 2cc * 

c
c   4 c>ccc    ?cc
 c
8/c  c c   )c
c 5  )c c *0 c  c 3 c c    0c c
  )c
c  
c (c c c    )c
c  c
 *  c
c 5 c
0c 0
c/c5 c

c  !9c
" #$ !c cccccccccccccc†
c

'c 4c 3 c /c c


5 
c c  3   c *c >M c ?c /c c
 5 c5< *c c c   cc  < )c
cc 2cc  c
cc c )c.  c
c
c
c 
cc
cc  )c
c7c 
c  c 5 
c c
IPSec >  c’ M?ccc5 2c c4cc
(cc
5 c8/;cc   0c
 cc  5 cc
c5 c cc   c  c c
  cc5 . c
cc

c
(c  c
c
$Para qué sirven?
9 c c c  c  c c  c  
 c
c 
c > 7c ' <c c $?c
 (5 c  c   c c  )c
c  c  7c c  2c   
c
   c  c/c  ccc
   
 c
c c 
c
c c c
c  )c
9  c c cc c
c 
2c c0c
  
c c3 ccc 
c c c
 c

cc<  Qcc  cc c4cc  c
c 05 c  c /c

c
c c  = c 5  c


c c   c 
c c  05 c  c c c
c 3 c
5c c c < c  c    c c  5 c c  c  c  c  c  c
c
c
5  c
c c 5 ;c c c  c
c
 )c
c  2c c ./c c
 c c  *c  (5 c 9c c .  c 5< *c 3 c c  c c

 c +c /c 5 c  


c .  c 3  c 2c

c
  c 3 c
 
cc 
2c.c   cc7 cc5 
c
c c
c =
c, c9 c
5  

c

c
c c  c 3 c   7c c =cc
c

c  !9c
" #$ !c cccccccccccccc†
c

1c./cc c
 * 
c< c c c 
cc  
2c
/c 3 cc c 7c *c
c

2cc c.  c3 c c c
  cc  c3 ccccc. c
c   c c c  c   c

c 5 c   c c 3 c 3 c c  4c  c c 5 c
c  *c 3 c .c

2c c * c  c c 5 c 5  
c
c c  c 5 2c /c  c  c
 
 c 
c c   c 3 c c 0c  
c  c 7c  2c c c  c
* c
c 
 cc 5  )c *c c c  4 )2c cc    c
c
  2c   c   c  c   * 

c /c c
c c
 c  c
  c /c
 c c/c  2c c c7ccc  c
*
c

 
c

$Qué es KFSensor?
EA9 c c c 9 c
c  )c
c   c >9?c 3 c 5  c c  =c
c c
8c

 7c c c ./c  c   c /c


  c c c . 6 c 
c c    )c
c
 /c/c  c
c c  *c

c  c 5  c  .( c  * 



c
c 5   )c c   /c c  * 

c
c
  c

2c0  c
c
c/c c
c

c

c c 53 c 3 c c c  c  c


c  c
c 

c /c  c  c

5c  cc  c4ccc3 cc5 c


cc  4 c

c  !9c
" #$ !c cccccccccccccc†ô
c

Instalación e implementación de KFSensor

 )c
cC  c

c

 =c
c cc  )c c
5 cc  )c.c
c  
c c

c  !9c
" #$ !c cccccccccccccc††
c

 )cEA9 c

 cc cc



c 0c 
cc  c

c  !9c
" #$ !c cccccccccccccc†Ñ
c

%  cc c c5  4 cc  )c

5   )c
cEA9 c

c  !9c
" #$ !c cccccccccccccc†-
c

9 cc c


c  cc   ccc
 )c

9 cc
  c

c  !9c
" #$ !c cccccccccccccc† 
c

  c
 c
c  c c  * c 5 c
c3 c

9 cc c


c  )c

c  !9c
" #$ !c cccccccccccccc†·
c

cc  c
c c c3 c 

c
c3 c   c  c )cc
EA9 c9  c5  cc  c 0 c

A  4cc 5   )c


cEA9 c

c  !9c
" #$ !c cccccccccccccc†"
c

  c 5 c
c c
c   )cc c

c c

c  !9c
" #$ !c cccccccccccccc†Î
c

 
 c% cc  
c% c
&c

c  !9c
" #$ !c ccccccccccccccÑ
c

c  !9c
" #$ !c ccccccccccccccÑ
c

c  !9c
" #$ !c ccccccccccccccÑô
c

& 1'9& c
c
c ) c
cc *c5 c
5  c3 cc c8/c/c c c. cc

c
c
c  

c c  c 
 5 c #c  c
c ./2c *c   )2c 
c
  )c/cc   )c1c   )c
5 c c  

c c./c  cc
c3 cc c
cc cc c"c ) 2c 
)cc   )c

1c8/c 
c c 
c c ) c
c 
)2c   
2c
 
cc


ccc3 c1c8/c* =c 
c c 
c c   )2c
  
c 5  )c
cc4c c(c
 c c/c
 c
5
 c  c
cc

c  !9c
" #$ !c ccccccccccccccц
c

1&M%Ac
ÿc 8/ cc+c
.]DD.  5 D 
D./Dc
ÿc * c
.]DD;;;4  DU  O  V !Jc
ÿc 9/ c
.]DD;;;/  D  D<D   /D D5 ; 6D1U"# .
c
ÿc 5 c
.]DD;;;
5  D
. 6D 5 .O
V"c
ÿc A 4 c
.]DD;;;5 4  c
ÿc $  6 ,8 6 c
.]DD;;;  6 ,. 6  c
.]DD;;;./ c
ÿc 8/c5 c; 
;2c% ccM 2c"!!2c
 c c
ÿc 8/2c$  6 c8 6 2c1 c9 4 2c"!!#2c

cC/c

c  !9c