Supervisory control and data acquisition (SCADA) attacks have increased due to the digital transformation of many industrial control systems (ICS). Operational technology (OT) operators should use the defense-in-depth concept to secure their operations from cyber attacks and reduce the surface that can be attacked. Layers of security, such as firewalls, endpoint solutions, honeypots, etc., should be used to secure traditional IT systems. The three main goals of IT cybersecurity are confidentiality, integrity, and availability (CIA), but these three goals have different levels of importance in the operational technology (OT) industry. Availability comes before confidentiality and integrity because of the criticality of business in OT. One of the layers of security in both IT and OT is honeypots. SCADA honeypots are used as a layer of security to mitigate attacks, known attackers’ techniques, and network and system weaknesses that attackers may use, and to mitigate these vulnerabilities. In this paper, we use SCADA honeypots for early detection of potential malicious tampering within a SCADA device network, and to determine threats against ICS/SCADA networks. An analysis of SCADA honeypots gives us the ability to know which protocols are most commonly attacked, and attackers’ behaviors, locations, and goals. We use an ICS/SCADA honeypot called Conpot, which simulates real ICS/SCADA systems with some ICS protocols and ICS/SCADA PLCs.

More from our Archive

• DOI: 10.3390/electronics12132857 2023

  Word-of-Mouth Engagement in Online Social Networks: Influence of Network Centrality and Density

  Bogdan Anastasiei, Nicoleta Dospinescu, Octavian Dospinescu

• DOI: 10.3390/systems11070329 2023

  Smarter and Prosperous: Digital Transformation and Enterprise Performance

  Da Gao, Zhiliang Yan, Xiaotian Zhou, Xinlin Mo

• DOI: 10.3390/systems11070351 2023

  Harnessing the Power of ChatGPT for Automating Systematic Review Process: Methodology, Case Study, Limitations, and Future Directions

  Ahmad Alshami, Moustafa Elsayed, Eslam Ali, Abdelrahman E. E. Eltoukhy, Tarek Zayed

• DOI: 10.3390/electronics12132921 2023

  Novel Heuristic Optimization Technique to Solve Economic Load Dispatch and Economic Emission Load Dispatch Problems

  Nagendra Singh, Tulika Chakrabarti, Prasun Chakrabarti, Martin Margala, Amit Gupta, S. Phani Praveen, Sivaneasan Bala Krishnan, Bhuvan Unhelkar

• DOI: 10.3390/systems11070336 2023

  Evaluation of Tourism Ecological Security and Its Driving Mechanism in the Yellow River Basin, China: Based on Open Systems Theory and DPSIR Model

  Xiaorong He, Chaoyue Cai, Jizhi Shi

• DOI: 10.1364/jocn.489228 2023

  Perspectives on and the road towards 100  Gb/s TDM PON with intensity-modulation and direct-detection

  Rene Bonk, Ed Harstead, Robert Borkowski, Vincent Houtsma, Yannick Lefevre, Amitkumar Mahadevan, Dora van Veen, Michiel Verplaetse, Sheldon Walklin

• DOI: 10.3390/electronics12143103 2023

  DDoS Attack Detection in IoT-Based Networks Using Machine Learning Models: A Survey and Research Directions

  Amal A. Alahmadi, Malak Aljabri, Fahd Alhaidari, Danyah J. Alharthi, Ghadi E. Rayani, Leena A. Marghalani, Ohoud B. Alotaibi, Shurooq A. Bajandouh

• DOI: 10.3390/computers12070141 2023

  A Deep Learning Network with Aggregation Residual Transformation for Human Activity Recognition Using Inertial and Stretch Sensors

  Sakorn Mekruksavanich, Anuchit Jitpattanakul

• DOI: 10.3390/systems11070348 2023

  Failure Mode and Effect Analysis with a Fuzzy Logic Approach

  José Jovani Cardiel-Ortega, Roberto Baeza-Serrato

• DOI: 10.3390/electronics12132984 2023

  DRL-Based Backbone SDN Control Methods in UAV-Assisted Networks for Computational Resource Efficiency

  Inseok Song, Prohim Tam, Seungwoo Kang, Seyha Ros, Seokhoon Kim