Types of Honeypots

Honeypots are classified two main ways: by interaction level (how much an attacker can do) and by purpose (research vs production). Choosing the right type balances insight against risk and effort.

A low-interaction honeypot emulates only a few services and limited responses. It is cheap, safe, and easy to deploy, but a savvy attacker may detect the emulation quickly.

• Good for catching automated scans and worms.
• Minimal compromise risk.