蜜罐是近几年发展起来的一种主动防御安全技术。文章首先综述了当前网络安全技术的应用和不足,分析了蜜罐技术的研究现状。提出了一个SNIBH入侵检测模型,设计并实现了数据捕获及分析等基本功能。分析收集的入侵者信息,从中提取入侵特征,以便提高入侵检测能力,使被动防御体系向主动的防御系统转化。 Honeypot is a kind of active defense safety technology developed in recent years. The article first summarizes the current network security technology application and the insufficiency, analyzes the honeypot technology research present situation. Proposed a SNIBH intrusion detection model, designed and implemented the basic functions of data capture and analysis. The collected intruder information is analyzed and the intrusion features are extracted from it so as to improve the intrusion detection capability and transform the passive defense system into an active defense system.