SCADA Honeynets: The attractiveness of honeypots as critical infrastructure security tools for the detection and analysis of advanced threats
SCADA Honeynets: The attractiveness of honeypots as critical infrastructure security tools for the detection and analysis of advanced threats
复制标题
SCADA 蜜网：蜜罐作为检测和分析高级威胁的关键基础设施安全工具的吸引力
DOI：
--
复制
发表时间：
2011
期刊：
影响因子：
--
通讯作者：
S. Wade
中科院分区：
文献类型：
--
作者：
S. Wade
自从Stuxnet蠕虫病毒被白俄罗斯一家安全公司发现以来，人们对控制系统安全的认识不断增强，并重新产生了兴趣。一些安全研究人员担心，Stuxnet受到的关注将产生扩散效应。控制系统现在会吸引黑客、有组织犯罪、恐怖分子和外国情报机构的更多关注吗？这些攻击是否会超越常见的典型病毒或恶意软件驱动的攻击？使用为控制系统设计的蜜网，将通过将模拟控制系统收到的攻击数量和类型与IT网络收到的攻击数量和类型进行比较，来寻求对这些问题的洞察。此外，还将探讨在控制系统上使用蜜网跟踪对手的手段和方法以及作为早期预警系统的有用性。
Since the Stuxnet worm was discovered by a Belarusian security company, there has been a growing awareness of and a renewed interest in control system security. There is concern from some security researchers that the attention Stuxnet has received will have a proliferating effect. Will control systems now attract more attention from hackers, organized crime, terrorists, and foreign intelligence services? Will these attacks evolve beyond the typical virus or malware driven attacks commonly seen? Using a honeynet designed for control systems, insight into these questions will be sought by comparing the number and types of attacks received by a simulated control system with the number and types of attacks received by an IT network. Also, the usefulness of using honeynets on control systems to track adversary’s means and methods as well as serve as an early warning system will be explored.