A Real Time Physics-Based Industrial Control System Honeynet Architecture for the Smart Grid

Many details of cyber attacks occurred to Industrial Control Systems (ICS) such as power grids remain as a secret. To reveal those secrets and benefit a broad research community, we propose an original cyber-physical honeypot architecture that can seamlessly couple IT and OT components in an power grid. Specifically, we will provide high interaction with adversaries as physical processes of an ICS move forward, revealing attack strategies according to adversaries’ knowledge on physical trajectories of the target system. Our preliminary evaluations demonstrate that the proposed CPS honeypot can present realistic device fingerprints and application-layer payload that piggybacks meaningful measurements conforming to the physical model of a power grid. In addition, by leveraging runtime high-fidelity OPAL-RT simulator, our CPS honeypot causes small latency, at least one order of magnitude smaller compared to the existing work.