Honeypots for Automatic Network-Level Industrial Control System Security

Maesschalck, Sam and Giotsas, Vasileios and Green, Benjamin and Race, Nicholas (2020) Honeypots for Automatic Network-Level Industrial Control System Security. In: 14th EuroSys Doctoral Workshop, 2020-04-272020-04-27.

Text (EUROSYS_Doctoral_Workshop)
EUROSYS_Doctoral_Workshop.pdf - Accepted Version
Available under License Creative Commons Attribution-NonCommercial.
Download (327kB)

Abstract

The proposed doctoral work investigates a new approach to implement, deploy and manage honeypots for Industrial Control Systems (ICS). Our goal is to address unique challenges of ICS security in terms of interactivity, resource utilization, timeliness of detection and uninterrupted operation, which are much stricter compared to traditional systems, making the existing approaches inefficient. Our proposal combines different levels of interactivity and coupling of the honeypots with the ICS network to satisfy trade-offs of detection accuracy and risk, and integrates the honeypot detection feeds with an SDN framework to enable autonomic reconfiguration.