Using Honeypots for ICS Threats Evaluation

Dutta, Nitul; Jadav, Nilesh Kumar; Dutiya, Nirali; Joshi, Dhara

doi:10.1007/978-3-030-31328-9_9

Cited by 7 publications

(1 citation statement)

References 7 publications

Supporting

Mentioning

Contrasting

Order By: Relevance

“…• GridPot [23], an open-source conceptual cyber-physical honeynet framework, will be used to replicate actual protocols used in industrial control systems.…”

Section: Honeypots Overviewmentioning

confidence: 99%

Protecting IEC 60870-5-104 ICS/SCADA Systems with Honeypots

Grigoriou¹,

Liatifis

Radoglou-Grammatikis

et al. 2022

2022 IEEE International Conference on Cyber Security and Resilience (CSR)

View full text Add to dashboard Cite

Both signature-based and anomaly-based Intrusion Detection and Prevention System (IDPS) have already demonstrated their efficiency towards recognising and mitigating various intrusions. However, the first category cannot detect zero-day attacks, while the second one lacks the presence of appropriate datasets. Therefore, the presence of additional cybersecurity mechanisms is necessary, especially in the area of the Industrial Internet of Things (IIoT), including critical infrastructures, such as the smart electrical grid. Thus, honeypots are used to hide and protect critical assets. IEC 60870-5-104 (IEC104) is a widely used telemetry protocol in Industrial Control Systems (ICS)/Supervisory Control and Data Acquisition (SCADA). However, IEC104 lacks critical security features, such as encryption, integrity protection and authentication. This work presents the IEC104 honeypot, which is capable of hiding the actual IEC104 assets and detecting potential intrusions and anomalies. The experimental results demonstrate the effectiveness of our work.

show abstract

“…• GridPot [23], an open-source conceptual cyber-physical honeynet framework, will be used to replicate actual protocols used in industrial control systems.…”

Section: Honeypots Overviewmentioning

confidence: 99%