Abstract: There arc many intrusion activities on the intranet in which network worms cause the greatest harm. Traditional network security means have many deficiencies, as a means of monitoring and information gathering, honey field technology is essentially different with traditional network security measures. A network worm detection method based on honcyfarm of threctied intranet was proposed. With the ability of improving the speed of worm detection, enhancing the security of internal network, it has important practical significance.

Key words: Intranet, Worm, Honeyfarm, Honeypot