Research on Network Intrusion Detection Technology Based on Honeypot

With the development of the network, people are becoming more and more dependent on the network for their work and lives, this makes the network environment complex. At the same time, cyberattack methods are constantly changing, new types of cyberattacks are on the rise. In this case, traditional passive defense techniques are very limited in dealing with new types of unknown attacks. To solve this problem, a honeypot-based network intrusion detection method is studied in this paper, combine proactive defense techniques with passive defense techniques, on this basis, an intrusion detection and signature generation system integrating honeypot technology was designed. The system deploys honeypots to trap attackers, captures realtime traffic information flowing through honeypot nodes, parses the packet content according to the network protocol, and uses machine learning detection models to detect the collected realtime traffic information.