Honeyproxy Technology

The prepositioned Honeynet serves as a proactive defense barrier in open networks, enabling early detection and isolation of hidden and unknown threats through continuous monitoring and traffic redirection. The system adapts to complex environments with concurrent protocols, dynamic address switching, and zero-day vulnerabilities, effectively capturing and redirecting potential attack traffic. Leveraging a high-fidelity Honeynet and multimodal feature fusion, it provides real-time awareness of gray traffic and accurate isolation and ensures network security and data integrity. It supports millisecond-level traffic collection, reputation evaluation, and dynamic trust assessment, combined with contextual semantic analysis to identify complete attack chains, enhancing proactive detection and traceability. In high-concurrency attack scenarios, it ensures low latency and zero interference for legitimate services, minimizing impact on normal operations while maximizing defense effectiveness. This chapter was supported by the National Natural Science Foundation of China (No. U2468204) and Guangdong Basic and Applied Basic Research Foundation (No. 2025B1515020022).