A honeypot is a decoy system set up to detect intrusions, while a honeynet is a group of honeypots. It is generally legal to use honeypots to detect intrusions on your own network. Software like Kippo or Cowrie could be used with honeypots deployed in unused areas of a network to detect unauthorized access attempts without risking sensitive systems.