A method for detecting intrusion in a field-bus network comprising a plurality of nodes, the method comprising: receiving, a plurality of message signals, by an Intrusion Detection System in a first node among the plurality of nodes, wherein the first node is configured to transmit and receive the plurality of message signals; characterized in that: generating, by the Intrusion Detection System, a first Honeypot signal by performing a hash function using at least one message signal among the plurality of message signals, wherein the hash signal is generated to mimic the message signal, wherein the first Honeypot signal is transmitted along with the plurality of message signals to a second node among the plurality of nodes; generating, by the Intrusion Detection System, a reference Honeypot signal by computing an echo-hash function to the generated first Honeypot signal wherein the reference Honeypot signal is stored in a memory associated with the Intrusion Detection System; receiving, by the Intrusion Detection System, a second Honeypot signal from the second node, wherein the second Honeypot signal is generated by performing the echo-hash function on the transmitted first Honeypot signal; and comparing, by the Intrusion Detection System, the reference Honeypot signal and the second Honeypot signal, for detecting an intrusion in the network. receiving, a plurality of message signals, by an Intrusion Detection System in a first node among the plurality of nodes, wherein the first node is configured to transmit and receive the plurality of message signals; characterized in that: generating, by the Intrusion Detection System, a first Honeypot signal by performing a hash function using at least one message signal among the plurality of message signals, wherein the hash signal is generated to mimic the message signal, wherein the first Honeypot signal is transmitted along with the plurality of message signals to a second node among the plurality of nodes; generating, by the Intrusion Detection System, a reference Honeypot signal by computing an echo-hash function to the generated first Honeypot signal wherein the reference Honeypot signal is stored in a memory associated with the Intrusion Detection System; receiving, by the Intrusion Detection System, a second Honeypot signal from the second node, wherein the second Honeypot signal is generated by performing the echo-hash function on the transmitted first Honeypot signal; and comparing, by the Intrusion Detection System, the reference Honeypot signal and the second Honeypot signal, for detecting an intrusion in the network. generating, by the Intrusion Detection System, a first Honeypot signal by performing a hash function using at least one message signal among the plurality of message signals, wherein the hash signal is generated to mimic the message signal, wherein the first Honeypot signal is transmitted along with the plurality of message signals to a second node among the plurality of nodes; generating, by the Intrusion Detection System, a reference Honeypot signal by computing an echo-hash function to the generated first Honeypot signal wherein the reference Honeypot signal is stored in a memory associated with the Intrusion Detection System; receiving, by the Intrusion Detection System, a second Honeypot signal from the second node, wherein the second Honeypot signal is generated by performing the echo-hash function on the transmitted first Honeypot signal; and comparing, by the Intrusion Detection System, the reference Honeypot signal and the second Honeypot signal, for detecting an intrusion in the network.