 |
System Operation Flow:
1. Incoming attack traffic enters the system and is inspected by SNORT, confirming it as malicious.
2. The traffic is redirected to the corresponding honeypot container.
3. The honeypot container captures behavior data and sends it to the AI for analysis.
Performance Summary:
1. The system achieves efficient attack detection while significantly reducing resource usage costs.
2. Compared to traditional methods, the dynamic deployment speed of honeypot containers is substantially improved.
|
IEEE/ICACT20250010 Slide.22
[Big Slide]
[YouTube]