Preface: May be biased, as I run a honeypot company. To your question: absolutely. They are also a very economically effective and (done right) an easy-to-impl

Preface: May be biased, as I run a honeypot company. To your question: absolutely. They are also a very economically effective and (done right) an easy-to-implement solution with very low-to-none risk of jeopardizing any legitimate traffic. To your why not do this - we are working on this right now. There's a lot of interest to what you described in above average maturity security teams; we have a few customers in this niche helping us design the "attacker playpen." You are right in that it is a challenge to make believeable enough without introducing risk into the environment.