This paper presents us how to build a security network system with active technology, make use of decoy sever to allure and track the attackers. In the procedure, a data analysis model is also brought out.