 This could be done, for example, by examining the response for the presence of malicious strings.Low interaction client honeypots are easier to deploy and operate than high interaction client honeypots and also perform better.However, they are likely to have a lower detection rate since attacks have to be known to the client honeypot in order for it to detect them; new attacks are likely to go unnoticed.