Honeypots for Threat Intelligence in Building Automation Systems

Bauer, Johann and Goltz, Johannes and Mundt, Thomas and Wiedenmann, Simeon (2019) Honeypots for Threat Intelligence in Building Automation Systems. In: ComComAp 2019, 26 Oct - 28 Oct 2019, Shenzhen, China. (Submitted)

[img] Text
SecureComm_2019_paper_22 (2).pdf - Submitted Version
Restricted to Repository staff only

Download (267kB)

Abstract

Direct Digital Controls (DDCs) are components of building automation systems that have a network interface. In this paper we describe how to create a honeypot for such a device. We have replicated the individual services available on the device with extensive logging mechanisms. To do this, we dealt with both protocol-specific as well as operating system-specific properties. We then conduct an experiment in which the honeypots are made publicly accessible on the Internet in order to check whether existing vulnerabilities are already being exploited in the examined devices. We then analysed the data and found no specific attacks for this device. Finally, we suggest possible improvements for future experiments.

Item Type: Conference or Workshop Item (Paper)
Divisions: Faculty of Engineering, Science and Mathematics > School of Electronics and Computer Science
Depositing User: Bauer
Date Deposited: 06 May 2019 12:31
Last Modified: 20 Jan 2020 14:00
URI: http://eprints.iuk.informatik.uni-rostock.de/id/eprint/705

Actions (login required)

View Item View Item