Know Your Enemy: Analysing Cyber-threats Against Industrial Control Systems Using Honeypot

Abstract

Industrial Control System (ICS) devices are being increasingly targeted by cyber attackers due to the lack of internet-ready security controls. IDS, firewall, IPS, and other protection measures are often used to prevent attacks on these systems but their efficiency depends on the prior knowledge of the attack patterns. In case of sophisticated and new attacks, they can't detect and take proper security measures. In this study, we deploy three low-interactive multi-platform honeypot in three different locations to lure cybercriminals to attack the networks. We perform large-scale analysis to observe current attack trends toward Industrial Control System (ICS), capture adversaries malicious activities and techniques for adaptive threat defense in the future.