Methods and techniques for the automation and simplification of ICS honey pots deployments and monitoring

最近，据报道，一些关键的基础设施系统，如清洁水系统和电力调节器，仍然连接到互联网，并通过搜索引擎公开访问，使它们面临网络威胁。收集针对关键基础设施的威胁的实时网络情报是一项复杂的挑战。该项目的目标是开发一种基础设施，以简化地理分布的一组蜜罐（蜜网）的部署，这些蜜罐将模仿工业控制系统（ICS）的特征，并将其视为攻击者的ICS。这将使我们的工业合作伙伴能够收集ICS攻击数据并对其进行分析，以建立有效的入侵检测系统和入侵防御系统。

Recently, it has been reported that several critical infrastructure systems, like clean water systems and powerregulators, were still connected to the Internet and accessible publicly trough search engines, exposing them tocyber threats. Gathering real-time cyber intelligence of the threats that are targeting critical infrastructures is acomplex challenge. The objective of this project is to develop an infrastructure that would streamline thedeployment of a geographically distributed set of honey pots (honey net) that would mimic industrial controlsystems (ICS) characteristics and look as ICS for the attackers. This would enable our industrial partner togather ICS attack data and analysed them, in order to build efficient intrusion detection systems and intrusionprevention systems.