STUDY AND EVALUATION OF THE INTEGRATED HONEYPOT SYSTEM T-POT FOR NETWORK ATTACK MONITORING

RESEARCH AND EVALUATION OF A T-POT-INTEGRATED HONEYPOT SYSTEM FOR CYBER ATTACK MONITORING

Abstract

In the context of increasingly complex cyber threats, the T-Pot honeypot system, deployed on a Linux platform and integrated with Elastic Stack/Kibana, is used to collect, analyze, and visualize attack events. The system effectively records and categorizes various common attacks, identifies attack sources, and simulates real system behaviors to deceive intruders. Experimental results demonstrate that T-Pot enhances monitoring efficiency, supports automated alerts, and approaches the capabilities of SIEM solutions. The findings confirm that Honeypot/T-Pot is an effective tool for both cybersecurity research and practical implementation.