SirenPod - AI-powered Honeypot for IoT Devices

SirenPod - 适用于物联网设备的人工智能蜜罐

• 批准号: 10097847
• 金额: $ 7.64万
• 依托单位: KINGSTON UNIVERSITY
• 依托单位国家: 英国
• 项目类别: Collaborative R&D
• 财政年份: 2023
• 资助国家: 英国
• 起止时间: 2023 至 无数据
• 项目状态: 已结题
• 来源: https://gtr.ukri.org/projects?ref=10097847
• 关键词: SirenPod; AI; powered; Honeypot; IoT

In the UK the estimate for the economic cost of cyber crime to the Government is £2.2bn per annum. We took information from the National Fraud Authority Annual Fraud Indicator, which estimates the total cost of tax and benefits fraud, local government and central government fraud, NHS fraud and pension fraud. The total cost was combined with an estimate from the NFA on the proportion of fraud that is attributable to 'criminal attacks'. Moreover the economic cost of cyber crime to UK businesses is £21bn per annum.Within an organization's comprehensive cybersecurity strategy aimed at safeguarding critical assets within their network and facilities, honeypots represent a novel tool for detecting cyberattacks. They prove invaluable in addressing the formidable challenge of identifying zero-day and advanced attacks targeting crucial infrastructure and systems, bolstering other intrusion detection systems in this endeavour. Furthermore, honeypots have the capacity to divert cyber attackers' attention and entice them as a decoy, thus thwarting potential assaults on the genuine network infrastructure.In this project, we propose the development of the next-generation honeypots, aptly named SirenPod, designed to mimic the behaviour of IoT devices known for their susceptibility to cyberattacks. Consequently, the SirenPod not only possess the capability to detect and analyse such attacks but can also function as a diversion, drawing potential attackers away from high-value energy or medical devices. This proposed advancement incorporates Artificial Intelligence to enhance both the current efficacy of deception during interactions with attackers and the fidelity of system emulation. SirenPod are poised to comprehensively meet the requirements of existing industrial and healthcare IoT equipment, while their adaptable and extensible designs position them for future expansion and capability enhancement.

在英国，网络犯罪给政府造成的经济损失估计为每年22亿英镑。我们从国家欺诈管理局年度欺诈指标中获取信息，该指标估计了税收和福利欺诈、地方政府和中央政府欺诈、NHS欺诈和养老金欺诈的总成本。总成本与NFA对可归因于“犯罪攻击”的欺诈比例的估计相结合。此外，英国企业每年因网络犯罪而付出的经济成本高达210亿英镑。在一个组织旨在保护其网络和设施内关键资产的全面网络安全战略中，蜜罐是一种检测网络攻击的新工具。它们在应对识别针对关键基础设施和系统的零日攻击和高级攻击的艰巨挑战方面证明是非常宝贵的，并在这方面支持其他入侵检测系统。此外，蜜罐还能转移网络攻击者的注意力，并将其作为诱饵，从而阻止对真正网络基础设施的潜在攻击。在本项目中，我们提出开发下一代蜜罐，恰当地命名为SirenPod，旨在模仿因易受网络攻击而闻名的物联网设备的行为。因此，SirenPod不仅具有检测和分析此类攻击的能力，还可以起到转移注意力的作用，将潜在攻击者从高价值能源或医疗设备中吸引出来。这一提议的进步结合了人工智能，以增强当前与攻击者交互期间的欺骗效果和系统仿真的保真度。SirenPod准备全面满足现有工业和医疗物联网设备的要求，而其适应性和可扩展的设计使其能够进行未来的扩展和能力增强。