Reconfigurable and Scalable Honeynet for Cyber-Physical Systems

TL;DR

This paper introduces a scalable, reconfigurable honeynet system for industrial control systems that automatically generates attacks, aiding in attack detection and dataset creation for cyber-physical security.

Contribution

It presents a novel scalable and reconfigurable honeynet architecture with automatic attack generation for cyber-physical systems, enhancing security research and defense capabilities.

Findings

Developed a scalable honeynet architecture

Implemented automatic attack generation tools

Facilitated dataset creation for attack detection algorithms

Abstract

Industrial Control Systems (ICS) constitute the backbone of contemporary industrial operations, ranging from modest heating, ventilation, and air conditioning systems to expansive national power grids. Given their pivotal role in critical infrastructure, there has been a concerted effort to enhance security measures and deepen our comprehension of potential cyber threats within this domain. To address these challenges, numerous implementations of Honeypots and Honeynets intended to detect and understand attacks have been employed for ICS. This approach diverges from conventional methods by focusing on making a scalable and reconfigurable honeynet for cyber-physical systems. It will also automatically generate attacks on the honeynet to test and validate it. With the development of a scalable and reconfigurable Honeynet and automatic attack generation tools, it is also expected that the system will serve as a basis for producing datasets for training algorithms for detecting and classifying attacks in cyber-physical honeynets.