What we know
The paper describes a hybrid intrusion detection system combining a supervised classifier trained on the NSL-KDD dataset with a Docker-based honeypot that deploys automatically when suspicious activity is detected. Traffic is classified into five categories, with a voting ensemble of three classifiers producing the detection.
Evidence limits
Review based only on the abstract deposited with Crossref; the full text was not examined and the results were not independently validated.
Reviewed: author abstract. Full-text results were not analyzed.
Sources and provenance
- Real-Time Network Intrusion Detection and Active Honeypot Deployment Using Machine Learning on KDD-Based Traffic Classification
abstract · 2026-10-11
Reviewed: 2026-10-16. This record may change when new evidence is found.