HoneyICS: A High-interaction Physics-aware Honeynet for Industrial Control Systems

HoneyICS: A High-interaction Physics-aware Honeynet for Industrial Control Systems

연구 분야: Infrastructure

학회: ARES '23: Proceedings of the 18th International Conference on Availability, Reliability and Security

Industrial control systems (ICSs) are vulnerable to cyber-physical attacks, i.e., security breaches in cyberspace that adversely affect the underlying physical processes. In this context, honeypots are effective countermeasures both to defend against such attacks and discover new attack strategies. In recent years, honeypots for ICSs have made significant progress in faithfully emulating OT networks, including physical process interactions. We propose HoneyICS, a high-interaction, physics-aware, scalable, and extensible honeynet for ICSs, equipped with an advanced monitoring system. We deployed our honeynet on the Internet and conducted experiments to evaluate the effectiveness of HoneyICS.