
Honeypots are important tools in network security, offering a means to detect, deflect, and analyze malicious activity. However, their effectiveness relies on remaining undetected. High-skill attackers are aware of honeypots and develop detection and evasion tactics. This paper presents a systematization of knowledge of the current state of honeypot detection, providing an overview of techniques employed in both laboratory and real-world settings.
