Methods and techniques for the automation and simplification of ICS honey pots deployments and monitoring

用于自动化和简化 ICS 蜜罐部署和监控的方法和技术

• 批准号: 508278-2017
• 负责人: Frappier, Marc
• 金额: $ 1.82万
• 依托单位: Université de Sherbrooke
• 依托单位国家: 加拿大
• 项目类别: Engage Grants Program
• 财政年份: 2017
• 资助国家: 加拿大
• 起止时间: 2017-01-01 至 2018-12-31
• 项目状态: 已结题
• 来源: https://www.nserc-crsng.gc.ca/ase-oro/Details-Detailles_eng.asp?id=639609
• 关键词: Methods; techniques; automation; simplification; ICS

Recently, it has been reported that several critical infrastructure systems, like clean water systems and powerregulators, were still connected to the Internet and accessible publicly trough search engines, exposing them tocyber threats. Gathering real-time cyber intelligence of the threats that are targeting critical infrastructures is acomplex challenge. The objective of this project is to develop an infrastructure that would streamline thedeployment of a geographically distributed set of honey pots (honey net) that would mimic industrial controlsystems (ICS) characteristics and look as ICS for the attackers. This would enable our industrial partner togather ICS attack data and analysed them, in order to build efficient intrusion detection systems and intrusionprevention systems.

最近，据报道，一些关键的基础设施系统，如清洁水系统和电力调节器，仍然连接到互联网，并通过搜索引擎公开访问，使它们面临网络威胁。收集针对关键基础设施的威胁的实时网络情报是一项复杂的挑战。该项目的目标是开发一种基础设施，以简化地理分布的一组蜜罐（蜜网）的部署，这些蜜罐将模仿工业控制系统（ICS）的特征，并将其视为攻击者的ICS。这将使我们的工业合作伙伴能够收集ICS攻击数据并对其进行分析，以建立有效的入侵检测系统和入侵防御系统。