Scalable ICS Honeypot Design by Description Files

I-Hsien Liu; Jun Hao Lin; Hsin Yu Lai; Jung Shian Li

doi:10.57417/jrnal.9.3_216

Scalable ICS Honeypot Design by Description Files

I-Hsien Liu, Jun Hao Lin, Hsin Yu Lai, Jung Shian Li

Research output: Contribution to journal › Article › peer-review

Abstract

A prototype honeypot system based on the Modbus/TCP protocol is designed for the protection of Industrial Control Systems (ICS). The proposed system operates under the control of a single server and enables multiple agents, each with several honeypot devices, to be deployed in different industrial environments. For each honeypot, the device characteristics are defined by JSON description files. The experimental results show that the interaction behavior of the proposed honeypot is closer to that of an authentic ICS device (a PLC) than that of the Conpot open-source ICS honeypot reported in the literature. Furthermore, the honeypot is awarded a perfect score by the honeypot scoring mechanism of Shodan Internet of Things (IoT) search engine.

Original language	English
Pages (from-to)	216-220
Number of pages	5
Journal	Journal of Robotics, Networking and Artificial Life
Volume	9
Issue number	3
DOIs	https://doi.org/10.57417/jrnal.9.3_216
Publication status	Published - 2022

All Science Journal Classification (ASJC) codes

Computer Networks and Communications
Artificial Intelligence

Access to Document

10.57417/jrnal.9.3_216

Cite this

@article{f4889b44dda84d5b930ee9f311e69343,

title = "Scalable ICS Honeypot Design by Description Files",

abstract = "A prototype honeypot system based on the Modbus/TCP protocol is designed for the protection of Industrial Control Systems (ICS). The proposed system operates under the control of a single server and enables multiple agents, each with several honeypot devices, to be deployed in different industrial environments. For each honeypot, the device characteristics are defined by JSON description files. The experimental results show that the interaction behavior of the proposed honeypot is closer to that of an authentic ICS device (a PLC) than that of the Conpot open-source ICS honeypot reported in the literature. Furthermore, the honeypot is awarded a perfect score by the honeypot scoring mechanism of Shodan Internet of Things (IoT) search engine.",

author = "I-Hsien Liu and Lin, {Jun Hao} and Lai, {Hsin Yu} and Li, {Jung Shian}",

note = "Publisher Copyright: {\textcopyright} 2022 The Author.",

year = "2022",

doi = "10.57417/jrnal.9.3_216",

language = "English",

volume = "9",

pages = "216--220",

journal = "Journal of Robotics, Networking and Artificial Life",

issn = "2405-9021",

publisher = "Atlantis Press",

number = "3",

}

TY - JOUR

T1 - Scalable ICS Honeypot Design by Description Files

AU - Liu, I-Hsien

AU - Lin, Jun Hao

AU - Lai, Hsin Yu

AU - Li, Jung Shian

PY - 2022

Y1 - 2022

N2 - A prototype honeypot system based on the Modbus/TCP protocol is designed for the protection of Industrial Control Systems (ICS). The proposed system operates under the control of a single server and enables multiple agents, each with several honeypot devices, to be deployed in different industrial environments. For each honeypot, the device characteristics are defined by JSON description files. The experimental results show that the interaction behavior of the proposed honeypot is closer to that of an authentic ICS device (a PLC) than that of the Conpot open-source ICS honeypot reported in the literature. Furthermore, the honeypot is awarded a perfect score by the honeypot scoring mechanism of Shodan Internet of Things (IoT) search engine.

AB - A prototype honeypot system based on the Modbus/TCP protocol is designed for the protection of Industrial Control Systems (ICS). The proposed system operates under the control of a single server and enables multiple agents, each with several honeypot devices, to be deployed in different industrial environments. For each honeypot, the device characteristics are defined by JSON description files. The experimental results show that the interaction behavior of the proposed honeypot is closer to that of an authentic ICS device (a PLC) than that of the Conpot open-source ICS honeypot reported in the literature. Furthermore, the honeypot is awarded a perfect score by the honeypot scoring mechanism of Shodan Internet of Things (IoT) search engine.

UR - http://www.scopus.com/inward/record.url?scp=85176559594&partnerID=8YFLogxK

UR - http://www.scopus.com/inward/citedby.url?scp=85176559594&partnerID=8YFLogxK

U2 - 10.57417/jrnal.9.3_216

DO - 10.57417/jrnal.9.3_216

M3 - Article

AN - SCOPUS:85176559594

SN - 2405-9021

VL - 9

SP - 216

EP - 220

JO - Journal of Robotics, Networking and Artificial Life

JF - Journal of Robotics, Networking and Artificial Life

IS - 3

ER -

Scalable ICS Honeypot Design by Description Files

Abstract

All Science Journal Classification (ASJC) codes

Access to Document

Other files and links

Fingerprint

Cite this