A Honeypot Process Control System Platform Based On Honeyd

It had been increasingly concerned about information security problems of industrial control systems, which brought lots of hidden information security issues in process of combination traditional industrial control systems with modern network technology. The problems of information security under industrial control systems were old and new, serious and urgent, which had let multi-disciplinary with cross-sectoral cooperation and exchange of academic research begin.Honeypot was a kind of proactive defence technology in classical information protection, which could lure intruders with recording, analysis and learning of aggressive behavior, and was an important complement to existing information security systems. It could not only be converted to active defence plus defensive perfect systems, with researching of intruder conduct and providing an experimental platform for study of information security means when the honeypot technology into industrial control systems, but also could be a prototype trying to architecture of cyber physical systems, and a platform to test the technologies combination traditional industrial control systems with open networks in the future.This article used the classic chemical reaction model Tennessee-Eastman process, combined with the famous honeypot software Honeyd, and relying on powerful simulation and computing capability about Matlab/Simulink, to transfer real-time production data simulated by Tennessee-Eastman process through network communication to the equipment simulated by Honeyd, with calling Python scripts to invoke a variety of behaviors for achieving devices response and real-time production process control, and finally to build a new type of honeypot process control system. It had greatly enhanced the credibility of honeypots simulation after joining industrial control system model into honeypot technology firstly in this paper, making it much easier for intruders to produce aggressive behavior; and the introduction of honeypot technology into industrial control systems would also integrate features of computing, communicating and control, of which cyber physical systems contained, to make a prototype practice. Industrial control systems with honeypot technology, Tennessee-Eastman process with Honeyd, complement each other, built a new type of honeypot process control system meeting current industrial systems’ information security requirements, and had laid a good platform foundation for future theoretical research.