We have heard stories about successful hacks into a network and the resulting damage that these cause an organization. In some cases, not only is the hack successful but it goes undetected for some time. The longer a hack goes unnoticed, the more damage that can be caused and the less likely that the perpetrator can be traced.

1. Briefly discuss traditional intrusion detection, honeynets, and honeypots.

2. If you were approached with a recommendation to make use of only one of these approaches, what would your decision be and why?