A growing number of organizations are leveraging darknets to increase their security intelligence and, in turn, enhance their security posture. Simply put, a darknet is an area of routed IP address space in which no active services reside. While traditionally every client, server, and network device has a unique IP address for each network connection, a darknet is comprised of a range of addresses for which there are no associated valid services or hosts. Thus, the network is “dark.”

What makes a darknet a powerful security tool is that after initial tuning, any traffic entering it from any source is most likely hostile traffic.

At ES.

[ Read more ]