With the rapid development of the Internet

network security has become more and more important. Existing network security technologies are passive defenses

and have their inherent drawbacks. How to perceive threats in the first time and respond in time is the key to intranet security protection. Based on the research of enterprise intranet security status and key technologies of spoofing

this paper proposes a threat trapping awareness system and applies it to the actual enterprise environment. It confuses the attacker while recording the attack information and carries out the network security emergency response. It can make up for the shortcomings of the traditional security protection system to detect unknown attacks

and effectively improve the ability of the enterprise intranet to actively defend.