Sensors for detection of cyber threats on industrial environment using a high interaction ICS/SCADA Honeynet1
Maxli Barroso Campos, Elson Gomes, Raphael C. S. Machado · 2022
In the present work, investigate the use of honeypots and honeynets designed for real-time control environments as tools to prevent cyber-attacks and produce statistics that help refine cybersecurity and anomaly detection techniques in ICS/SCADA environments. High interaction ICS/SCADA Honeynets can be viewed as sensors that can maintain an updated base of attack signature techniques, helping the identification of vulnerabilities in Information and Industrial Automation Systems and promoting the preservation of evidence of attacks for future forensic analysis. The present work was the result of a strategic partnership between the Brazilian Army and the Itaipu Technological Park Foundation - Brazil (FPTI-BR). The project was based on free software and currently serves as an important instrument in Brazil for information exchange and threat intelligence sharing for the national electricity sector. The achieved results highlight the potential that honeynets have to address cybersecurity issues in ICS/SCADA environments.