On Design and Enhancement of Smart Grid Honeypot System for Practical Collection...
Talkat 13th USENIX Workshop on Cyber Security Experimentation and Test (CSET '20) · on Monday, 2020-08-10·
summary
A virtual smart‑grid honeypot is built that emulates a substation and control‑center network (SCADA/HMI, historian, VPNs, IEDs, gateway) and is hardened iteratively via penetration tests using nmap, Metasploit and p0f. Countermeasures include honeyd front end to proxy services, transparent proxy boxes for tamper‑resistant packet logging, and dummy user accounts/closed ports to attract realistic attacker behaviour. Nmap fingerprints of improved IED VMs closely match real devices with only minor, non‑decisive differences; VM images and logs are published for further use.
AI-written summary · about
chapters (7)
- 0:00Intro
- 0:29Background and Motivation
- 1:27Approach
- 3:33Evaluation from Attackers' perspective
- 5:16Insights obtained from the experiments
- 9:40Enhancement of Logging for Data Collectie
- 12:57OS Fingerprints of Active Devices
related talks
32mFaking a Factory: Creating and Operating a Realistic Honeypot
35mCyber Deception 2.0: Adaptive Honeynets and Canary Intelligence in Production
23mHoneypots 2.0: A New ‘Twist’ on Defending Enterprise Networks
46mAn OT Cyber attack simulation on a chemical plant
30mYou See Honey, I See Beehive: Developing Honey Networks
31mWeb Application Honeypot Threat Intelligence
53mCybersecurity of SmartGrid
34mWhat Minesweeper Can Teach Us About Security