TY - GEN
T1 - Method for Generating Deceptive Bait in Industrial Control Systems Based on Software Simulation
AU - Sun, Fanghui
AU - Zhang, Shuo
AU - Liu, Zuofu
AU - Yu, Tingyue
AU - Chen, Zihong
AU - Wang, Shen
N1 - Publisher Copyright:
© The Author(s), under exclusive license to Springer Nature Singapore Pte Ltd. 2026.
PY - 2026
Y1 - 2026
N2 - Industrial control systems (ICS), extensively used in critical infrastructure, have become prime targets for cyber-attacks. Honeypot is an effective method to attract cyber-attacks. However, existing honeypot baits face challenges such as low credibility, lack of flexibility, and inadequate adaptation to the unique characteristics of industrial control systems. Therefore, this paper proposes a bait generation method based on software simulation. By defining and retrieving software operation processes, measuring of function priority value, and simulating software execution, this method achieves the simulation of ICS configuration software. Additionally, the effectiveness of the simulation program in mimicking the behavior of real industrial configuration software is validated through experiments. This approach marks a significant advancement in the development of more reliable and adaptable cyber defense tools for ICS.
AB - Industrial control systems (ICS), extensively used in critical infrastructure, have become prime targets for cyber-attacks. Honeypot is an effective method to attract cyber-attacks. However, existing honeypot baits face challenges such as low credibility, lack of flexibility, and inadequate adaptation to the unique characteristics of industrial control systems. Therefore, this paper proposes a bait generation method based on software simulation. By defining and retrieving software operation processes, measuring of function priority value, and simulating software execution, this method achieves the simulation of ICS configuration software. Additionally, the effectiveness of the simulation program in mimicking the behavior of real industrial configuration software is validated through experiments. This approach marks a significant advancement in the development of more reliable and adaptable cyber defense tools for ICS.
KW - Honeypot
KW - Hook
KW - Industrial control systems
UR - https://www.scopus.com/pages/publications/105028337046
U2 - 10.1007/978-981-96-6859-5_6
DO - 10.1007/978-981-96-6859-5_6
M3 - 会议稿件
AN - SCOPUS:105028337046
SN - 9789819668588
T3 - Smart Innovation, Systems and Technologies
SP - 69
EP - 80
BT - Advances in Intelligent Information Hiding and Multimedia Signal Processing - Proceedings of the 20th IIHMSP 2024 in Conjunction with the 19th ISME 2024
A2 - Watada, Junzo
A2 - Kountcheva, Roumiana
A2 - Shieh, Chin-Shiuh
A2 - Chu, Shu-Chuan
A2 - Tseng, Shih-Pang
PB - Springer Science and Business Media Deutschland GmbH
T2 - 20th International Conference on Intelligent Information Hiding and Multimedia Signal Processing, IIHMSP 2024 is held in conjunction with the 19th International Symposium on Management Engineering, ISME 2024
Y2 - 4 October 2024 through 6 October 2024
ER -