Adaptive Defense: Enhancing NIDS with Smart Honeypots and Attack Profiling
1 IU University of Applied Sciences, Berlin 10247, Germany
* Authors to whom correspondence should be addressed.
https://doi.org/10.66967/jsc.2026.v2i201
Received: 15 March 2026
Revised: 27 July 2026
Accepted: 27 August 2026
Published: 27 August 2026

The paper examines the integration of the clever honeypots with the attacker behaviour analysis to enhance the network intrusion detection in the contemporary cyberspace environment. Due to the rapid development of cyber threats, the target of traditional intrusion detection systems (that are primarily based on fixed rules and known signatures) is to identify zero-day exploits, polymorphism, malware, and advanced persistent threats. In an attempt to circumvent these constraints, the study employs a quantitative paradigm that incorporates the survey of experts, simulated honeypot logs, and machine-learning-based behaviour analysis. Honeypot data around the world show trends in the frequency of attacks and ports attacked as well as the geographic origin and time. The 4 machine-learning models, Logistic Regression, KNN, Random Forest and XGBoost, were trained and tested on the feature-engineered datasets. The ensemble techniques performed well as compared to their linear counterparts with XGBoost recording 99.96 0-percent accuracy and Rand. Forest recording a 100 percent accuracy in the dataset. The findings demonstrate that intelligent honeypots do not only collect valuable behavioural indications, but also offer highly predictive attributes to automated detecting mechanisms. The research concludes that combining honeypot intelligence with machine learning improves real-time identification, proactive defence, as well as reducing the false alarms.

Altunay, H.C. Analysis of Cyber Attacks Using Honeypot. Black Sea J. Eng. Sci. 2024, 7, 954–959.

Andrade, C. The inconvenient truth about convenience and purposive samples. Indian J. Psychol. Med. 2021, 43, 86–88.

Robinson, R.J. Deciphering Generative AI Risk Trends to Integrate Compliance as an Industry Practice. Int. J. Sci. Eng. Manag. 2023, 10.

Franco, J.; Aris, A.; Canberk, B.; Uluagac, A.S. A survey of honeypots and honeynets for internet of things, industrial internet of things, and cyber-physical systems. IEEE Commun. Surv. Tutor. 2021, 23, 2351–2383.

Gao, Y.; Zhang, G.; Xing, C. A multiphase dynamic deployment mechanism of virtualized honeypots based on intelligent attack path prediction. Secur. Commun. Netw. 2021, 2021, 6378218.

Heidari, A.; Jabraeil Jamali, M.A. Internet of Things intrusion detection systems: a comprehensive review and future directions. Cluster Comput. 2023, 26, 3753–3780.

Iyer, K.I. Adaptive honeypots: Dynamic deception tactics in modern cyber defense. Int. J. Sci. Res. Arch. 2021, 4, 340–351.

Kocher, G.; Kumar, G. Machine learning and deep learning methods for intrusion detection systems: recent developments and challenges. Soft Comput. 2021, 25, 9731–9763.

Kumar, S.; Gupta, S.; Arora, S. Research trends in network-based intrusion detection systems: A review. IEEE Access 2021, 9, 157761–157779.

Moric, Z.; Mršić, L.; Kunić, Z.; Đambić, G. Honeypots in cybersecurity: their analysis, evaluation and importance. Preprints.org 2024, 202408.0946.v1 (preprint).

Morrison, B.; Coventry, L.; Briggs, P. How do Older Adults feel about engaging with Cyber‐Security? Hum. Behav. Emerg. Technol. 2021, 3, 1033–1049.

Priya, V.D.; Chakkaravarthy, S.S. Containerized cloud-based honeypot deception for tracking attackers. Sci. Rep. 2023, 13, 1437.

Rehnbäck, O. A case study of unauthorized login attempts against honeypots via remote desktop. Master’s Thesis, Luleå University of Technology, Luleå, Sweden, 28 July 2023.

Robinson, R.J. Cybersecurity Compliance Frameworks-a pragmatic view with an IT outsourcing company case study. Soc. Lens 2024, 1, 15–25.

Survey of intrusion detection systems: techniques, datasets and challenges. Available online: https://cybersecurity.sprin
geropen.com/articles/10.1186/s42400-019-0038-7 (accessed on 14 November 2025).

Steingartner, W.; Galinec, D.; Kozina, A. Threat defense: Cyber deception approach and education for resilience in hybrid threats model. Symmetry 2021, 13, 597.

Robinson, R.J. Digital Security: A Critical Evaluation Process for IT-Security Products. Math. Comput. Sci. Contemp. Dev. 2024, 6, 18–30.

Yang, Y.T.; Zhu, Q. When to Deceive: A Cross-Layer Stackelberg Game Framework for Strategic Timing of Cyber Deception. arXiv 2025, arXiv:2505.21244 (preprint).

Zhekova, M. An Algorithm for Exploratory Analysis and Normalization of Big Data with Pandas. Proc. Bulg. Acad. Sci. 2023, 76, 1716–1723.

Zhou, S.; Wang, Y. Modality-Independent Disentangled Neural Architecture for Enhanced Artificial Intelligence in Electronic Information Systems. Int. J. Adv. AI Appl. 2025, 1, 63–80.

Download
Cite this
Article Metrics
340
Article Access Statistics