SirenPod - AI-powered Honeypot for IoT Devices

在英国，网络犯罪给政府造成的经济损失估计为每年22亿英镑。我们从国家欺诈管理局的年度欺诈指标中获取信息，该指标估计了税收和福利欺诈、地方政府和中央政府欺诈、NHS欺诈和养老金欺诈的总成本。总成本与NFA对可归因于“犯罪攻击”的欺诈比例的估计相结合。此外，网络犯罪每年给英国企业造成的经济损失为210亿英镑。在组织旨在保护其网络和设施内关键资产的综合网络安全战略中，蜜罐代表了一种检测网络攻击的新工具。事实证明，它们在应对识别针对关键基础设施和系统的零日攻击和高级攻击的艰巨挑战方面是无价的，并在此努力中支持其他入侵检测系统。此外，蜜罐有能力转移网络攻击者的注意力，引诱他们作为诱饵，从而阻止对真正的网络基础设施的潜在攻击。在这个项目中，我们建议开发下一代蜜罐，恰如其分地命名为SirenPod，旨在模仿物联网设备的行为，这些设备以易受网络攻击而闻名。因此，SirenPod不仅具有检测和分析此类攻击的能力，还可以作为转移的功能，吸引潜在的攻击者远离高价值的能源或医疗设备。这一提出的进步结合了人工智能，以提高与攻击者交互时欺骗的当前有效性和系统仿真的保真度。SirenPod准备全面满足现有工业和医疗物联网设备的要求，同时其适应性和可扩展的设计使其能够在未来扩展和增强功能。

In the UK the estimate for the economic cost of cyber crime to the Government is £2.2bn per annum. We took information from the National Fraud Authority Annual Fraud Indicator, which estimates the total cost of tax and benefits fraud, local government and central government fraud, NHS fraud and pension fraud. The total cost was combined with an estimate from the NFA on the proportion of fraud that is attributable to 'criminal attacks'. Moreover the economic cost of cyber crime to UK businesses is £21bn per annum.Within an organization's comprehensive cybersecurity strategy aimed at safeguarding critical assets within their network and facilities, honeypots represent a novel tool for detecting cyberattacks. They prove invaluable in addressing the formidable challenge of identifying zero-day and advanced attacks targeting crucial infrastructure and systems, bolstering other intrusion detection systems in this endeavour. Furthermore, honeypots have the capacity to divert cyber attackers' attention and entice them as a decoy, thus thwarting potential assaults on the genuine network infrastructure.In this project, we propose the development of the next-generation honeypots, aptly named SirenPod, designed to mimic the behaviour of IoT devices known for their susceptibility to cyberattacks. Consequently, the SirenPod not only possess the capability to detect and analyse such attacks but can also function as a diversion, drawing potential attackers away from high-value energy or medical devices. This proposed advancement incorporates Artificial Intelligence to enhance both the current efficacy of deception during interactions with attackers and the fidelity of system emulation. SirenPod are poised to comprehensively meet the requirements of existing industrial and healthcare IoT equipment, while their adaptable and extensible designs position them for future expansion and capability enhancement.