Faking smart industry: exploring cyber-threat landscape deploying cloud-based honeypot

Rashid, Sara Mahmoudi; Haq, Ashfaqul; Hasan, Sayed Tanimun; Furhad, Md Hasan; Ahmed, Mohiuddin; Ullah, Abu S. S. M. Barkat

doi:10.1007/s11276-022-03057-y

Cited by 10 publications

(4 citation statements)

References 10 publications

Supporting

Mentioning

Contrasting

Order By: Relevance

“…As the honeypot is deployed in the cloud, hackers could readily distinguish it as a decoy system. Hence, we strongly believe that the findings obtained were the repercussion of bots scanning the cloud and are therefore insufficient to improve the security intelligence of the ICS system as asserted by 23 .…”

Section: Virtualization and Containerizationmentioning

confidence: 94%

“…Novelty of our experimentation. Existing research 23 on containerized honeypot data analysis has mostly focused on information pertaining to Industrial Control System (ICS) devices and is insufficient to analyze all of the data that has been collected. As the honeypot is deployed in the cloud, hackers could readily distinguish it as a decoy system.…”

Section: Virtualization and Containerizationmentioning

confidence: 99%

“…In order to assess the present threat environment as well as how intelligent and crafty bad actors may be in compromising internet-facing ICS (Industry Control System), Rashid et al 23 implemented flexible low-interaction honeypot within AWS EC2 cloud instance over six distinct zones. Their research primarily focuses on honeypot data relevant to ICS systems and compares the top 10 AS/ASN attackers, interactions with various ICS devices and their geolocation, brute force attack rate, CVE and signature alerts, IP reputation, authentication events, various post-exploitation actions along with its sample instructions, malware signature, and interactions from different sources.…”

Section: Conceptual Models Of Allied Frameworkmentioning

confidence: 99%

See 2 more Smart Citations

Containerized cloud-based honeypot deception for tracking attackers

Priya

Chakkaravarthy

2023

Sci Rep

View full text Add to dashboard Cite

Discovering malicious packets amid a cloud of normal activity, whether you use an IDS or gather and analyze machine and device log files on company infrastructure, may be challenging and time consuming. The vulnerability landscape is rapidly evolving, and it will only become worse as more and more developing technologies, such as IoT, Industrial Automation, CPS, Digital Twins, etc are digitally connected. A honey trap aids in identifying malicious packets easily as, after a few rapid calibrations to eliminate false positives. Besides analyzing and reporting particular invasion patterns or toolkits exploited, it also assists in preventing access to actual devices by simulating the genuine systems and applications functioning in the network thus delaying as well as baffling the invader. In order to analyze and evaluate the hackers’ behavior, an ensemble of research honeypot detectors has been deployed in our work. This paper delivers a robust outline of the deployment of containerized honeypot deployment, as a direct consequence, these are portable, durable, and simple to deploy and administer. The instrumented approach was monitored and generated countless data points on which significant judgments about the malevolent users’ activities and purpose could be inferred.

show abstract

Section: Virtualization and Containerizationmentioning

confidence: 94%

Section: Virtualization and Containerizationmentioning

confidence: 99%

Section: Conceptual Models Of Allied Frameworkmentioning

confidence: 99%

See 1 more Smart Citation

Containerized cloud-based honeypot deception for tracking attackers

Priya

Chakkaravarthy

2023

Sci Rep

View full text Add to dashboard Cite

show abstract

“…This transition showcases a dynamic and flexible approach to treating PLCs as a service. However, this shift has also led to an expansion of potential vulnerabilities due to the intricate nature of largescale frameworks, resulting in increased points of entry from diverse sources [231], [232]. Addressing the future security concerns associated with safeguarding these control systems involves the utilization of security platforms hosted in the cloud [233].…”

Section: E Computing Based On Cloudmentioning

confidence: 99%

Security of Programmable Logic Controllers and Related Systems: Today and Tomorrow

Alsabbagh,

Langendörfer

2023

IEEE Open J. Ind. Electron. Soc.

View full text Add to dashboard Cite

Programmable Logic Controllers (PLCs) are indispensable in Critical Infrastructures (CIs) and Industrial Control Systems (ICSs). The increasing demand for enhanced cost-effectiveness and production efficiency has driven automation manufacturers to integrate PLC based applications and systems with external networks, such as Internet. Unfortunately, this connectivity has exposed systems to potential malicious attacks from motivated adversaries. Addressing this pressing issue necessitates a comprehensive summary of ongoing research related to PLCs and their related systems. This summary should classify these systems based on disclosed vulnerabilities, potential threats, and proposed security solutions, catering to both scientists and industrial engineers. While several recent surveys have reviewed and discussed PLC security and related topics, they often fell short of covering all essential aspects comprehensively. Furthermore, prior surveys tended to focus on analyzing vulnerabilities at the system level, overlooking the vulnerabilities specific to PLCs themselves. Consequently, their findings failed to effectively secure current operational systems or propose improved solutions for future PLC designs. In this paper, we bridge this research gap by providing a detailed review of all aspects concerning the security of PLCs and related systems. This includes vulnerabilities, potential attacks, security solutions including digital forensics. We aim to offer a precise analysis, addressing the shortcomings of previous studies. Finally, we conclude the paper by presenting our recommendations tailored for PLC manufacturers, researchers and engineers. We hope that these recommendations will contribute to the development of more secure PLCs in the future.

show abstract

Exploring Network Security Metric and Enhancing the Secure Computing for Cloud through Honeypot

Joshi

2024

2024 International Conference on Emerging Techniques in Computational Intelligence (ICETCI)

View full text Add to dashboard Cite

Faking smart industry: exploring cyber-threat landscape deploying cloud-based honeypot

Cited by 10 publications

References 10 publications

Containerized cloud-based honeypot deception for tracking attackers

Containerized cloud-based honeypot deception for tracking attackers

Security of Programmable Logic Controllers and Related Systems: Today and Tomorrow

Exploring Network Security Metric and Enhancing the Secure Computing for Cloud through Honeypot

Contact Info

Product

Resources

About