The invention discloses a honey pot construction method and a honey pot construction system. The system comprises a flow analysis device, a honey pot construction device, an identity authentication device, a honey pot deployment device and a log storage device, wherein the honey pot construction device comprises a protocol processing service device and a host simulation service device; the flow analysis device is used for analyzing and obtaining a suspicious data stream and transmitting the suspicious data stream to the honey pot construction device; the honey pot construction device is used for starting the protocol processing service device or the host simulation service device to respond to the suspicious flow according to the attributes of the suspicious flow, and generating corresponding log information from the response result and storing the corresponding log information into the log storage device. Therefore, the target of automatically deploying the honey pot system according to the requirements is achieved.