Detection of Honeypot Systems Based on a Comprehensive Analysis of Node Performance Indicators

The principles of construction and operation of honeypot systems are studied. Existing detection methods are analyzed, and their advantages and disadvantages are highlighted. A detection method based on the analysis of command execution delays is proposed. A universal detection method based on combining the results of the methods is proposed. A software prototype of the detection system is developed and tested.