Low Interaction Have less functionality and easier to build and deploy. Generally capture less information. Primarily used for deception and detection. Example : Mainly emulated service. Tools: http://www.honeyd.org http://www.nfr.com/resource/backOfficer.php