Constructing cost-effective and targetable industrial control system honeypots for production networks

International Journal of Critical Infrastructure Protection

Volumn 10, Issue , 2015, Pages 47-58

  Winn, Michael ^a   Rice, Mason ^a   Dunlap, Stephen ^a   Lopez, Juan ^b   Mullins, Barry ^a  

^a Air Force Institute of Technology   (United States)

^b Applied Research Solutions   (United States)

Author keywords

Honeypots; Industrial control systems; Production networks; Programmable logic controllers

Indexed keywords

COMPUTER CIRCUITS; COST EFFECTIVENESS; COSTS; PROGRAMMABLE LOGIC CONTROLLERS; PROGRAMMED CONTROL SYSTEMS;

COST-EFFECTIVE METHODS; HARDWARE AND SOFTWARE; HONEYPOTS; INDUSTRIAL CONTROL SYSTEMS; MALICIOUS ENTITY; PRODUCTION NETWORK; SECURITY CONTROLS; SENSITIVE SYSTEMS;

CONTROLLERS;

EID: 84939266661     PISSN: 18745482     EISSN: None     Source Type: Journal    
DOI: 10.1016/j.ijcip.2015.04.002     Document Type: Article

References (13)

1. Allen-Bradley, 1756 ControlLogix Controllers, Technical Data, Publication 1756-TD001H-EN-P, Rockwell Automation, Milwaukee, Wisconsin (), 2013. http://www.literature.rockwellautomation.com/idc/groups/literature/documents/td/1756-td001_-en-p.pdf.
2. D. Berman, Emulating Industrial Control System Devices Using Gumstix Technology, M.S. Thesis, AFIT/GCO/ENG/12-13, Department of Electrical and Computer Engineering, Air Force Institute of Technology, Wright-Patterson Air Force Base, Ohio (), 2012. http://www.dtic.mil/cgi-bin/GetTRDoc?AD=ADA563104.
3. Bodenheim R., Butts J., Dunlap S., Mullins B. Evaluation of the ability of the Shodan search engine to identify Internet-facing industrial control devices. International Journal of Critical Infrastructure Protection 2014, vol. 7(2):114-123.
4. C-SPAN, Cybersecurity threats (), November 20, 2014. http://www.c-span.org/video/?322853-1/hearing-cybersecurity-threats.
5. Idaho National Laboratory, INL's SCADA Test Bed, Idaho Falls, Idaho (), 2014. http://www.4vip.inl.gov/research/national-supervisory-control-and-data-acquisition-test-bed.
6. R. Jaromin, Emulation of Industrial Control Field Device Protocols, M.S. Thesis, AFIT-ENG-13-M-27, Department of Electrical and Computer Engineering, Wright-Patterson Air Force Base, Ohio (), 2013. http://www.dtic.mil/cgi-bin/GetTRDoc?Location=U2&doc=GetTRDoc.pdf&AD=ADA582482.
7. G. Lyon, Nmap Network Scanning: The Official Nmap Project Guide to Network Discovery and Security Scanning, Insecure.Com, Sunnyvale, California, 2008.
8. V. Pothamsetty and M. Franz, SCADA HoneyNet Project: Building Honeypots for Industrial Networks (), 2005. http://www.scadahoneynet.sourceforge.net.
9. N. Provos, HONEYD(8), OpenBSD System Manager's Manual (), 2002. http://www.citi.umich.edu/u/provos/honeyd/honeyd-man.pdf.
10. N. Provos, A virtual honeypot framework, Proceedings of the Thirteenth USENIX Security Symposium, 2004.
11. L. Shaw, A portable C string replacement function: repl_str(), creativeandcritical.net (), 2009. http://www.creativeandcritical.net/str-replace-c.
12. Spitzner L. The Honeynet Project. Trapping the hackers. IEEE Security and Privacy 2003, vol. 1(2):15-23.
13. S. Wade, SCADA Honeynets: The Attractiveness of Honeypots as Critical Infrastructure Security Tools for the Detection and Analysis of Advanced Threats, M.S. Thesis, Department of Electrical and Computer Engineering, Iowa State University, Ames, Iowa (), 2011. http://www.lib.dr.iastate.edu/cgi/viewcontent.cgi?article=3130&context=etd.