Honeypots and Open Recommendations

[AgentDarkApple]

I don't want to bug anyone by starting a whole thread on this, but I have to do a paper about honeypots/honeynets/honeyclients for another class. I've found a lot of good resources on Safari Online, stuff about the Honeyclient Project, etc. I don't need as much in depth research for this as I needed for the IW paper, but if anyone has any recommendations for resources, real life experience with honeypots, or wants to voice their opinion on if the things should be legal or not, please leave a comment or send a PM.

Also, if any of you want to recommend other resources for something other than my paper topic, here is a list of some of the stuff that interests me as far as hacking / info systems security / programming / technology / geekery in general:

-anything I might need to know for CISSP or GIAC
-anything I might need to know for the Certified Ethical Hacker certification
-anything and everything about information warfare or about new technologies that could be used for it
-nanotechnology
-computer forensics
-anything about OO programming and techniques to write more secure software
-anything about securing Macs and iPhones
-VPNs
-Cyberpunk anime recommendations
-any new or current technologies that remind you of something from Orwell, Huxley, or Masamune Shirow
-any sites along the lines of Science Daily or Wired or FAS
-green technology, solar power, etc.
-anything else I SHOULD learn that I may not even be aware of yet

I'm not asking for spoonfeeding - I'm willing to read the books/sites/manuals, etc. - I'm just not always sure where to start looking once the search engines dry up. And I know some of the best stuff out there doesn't show up on Google.

[AgentDarkApple]

Thanks! I'll have to look into that one. I have been lazier about this paper because the due date has been changed. I finally finished my Information Warfare rough draft (technically it was done, but then I got a good interview with Winn Schwartau and added in the info he gave me). I have to start on my DDoS paper soon too lol, but the information available about DDoS attacks is almost endless.

[RTKsbox35]

I have the entire official library (the hardbound books and supplemental material) for the E.sea councils prep material. I also have copies of the stuff pedled as "semi-legitimate" software from a few stores in Thailand. Message me regarding any of the material and I will send you the links they offer up as valid for test prep. IMO test is much harder than the CompTIA Networks+, Network Security, etc cert tests so if you have the funds take those first. The C.E.H. test itself was very esoteric and narrowly focused. Many "Jhonny the employee..." type questions and although not explicitly stated a deep cognizance in Unix and Network Admin is required to gain a desirable score. My two cents. Good Luck.

[AgentDarkApple]

Thanks! I can't think of any specific material I need yet. I'm casually studying extra stuff since I wouldn't be eligible to take the test yet anyways. That's actually a good thing (for me at least) that you need a background in Unix and network admin stuff - that's exactly what my dad does, and he let me read his books a while back :) He's been preaching the importance of Unix knowledge to me for quite a while.