2. Scalable ICS Honeypot Design by Description Files

I-Hsien Liu, Jun-Hao Lin, Hsin-Yu Lai, Jung-Shian Li
Department of Electrical Engineering / Institute of Computer and Communication Engineering, National Cheng Kung University
No.1, University Rd., East Dist., Tainan City 70101, Taiwan
Pages 216–220
ABSTRACT
A prototype honeypot system based on the Modbus/TCP protocol is designed for the protection of Industrial Control Systems (ICS). The proposed system operates under the control of a single server and enables multiple agents, each with several honeypot devices, to be deployed in different industrial environments. For each honeypot, the device characteristics are defined by JSON description files. The experimental results show that the interaction behavior of the proposed honeypot is closer to that of an authentic ICS device (a PLC) than that of the Conpot open-source ICS honeypot reported in the literature. Furthermore, the honeypot is awarded a perfect score by the honeypot scoring mechanism of Shodan Internet of Things (IoT) search engine

ARTICLE INFO
Article History
Received 28 October 2021
Accepted 07 August 2022

Keywords
Industrial control system
Honeypot
Cybersecurity
Shodan)

JRNAL9302

Download article (PDF)