首页> 外文期刊>IEEE transactions on industrial informatics >Honeypot Identification in Softwarized Industrial Cyber–Physical Systems
【24h】

Honeypot Identification in Softwarized Industrial Cyber–Physical Systems

机译:软湿润的工业网络物理系统中的蜜罐识别

获取原文
获取原文并翻译 | 示例
           

摘要

In softwarized industrial networking, honeypot identification is very important for both the attacker and the defender. Existing honeypot identification relies on simple features of honeypot. There exist two challenges: The simple feature is easily simulated, which causes inaccurate results, whereas the advanced feature relies on high interactions, which lead to security risks. To cope with these challenges, in this article, we propose a secure fuzzy testing approach for honeypot identification inspired by vulnerability mining. It utilizes error handling to distinguish honeypots and real devices. Specifically, we adopt a novel identification architecture with two steps. First, a multiobject fuzzy testing is proposed. It adopts mutation rules and security rules to generate effective and secure probe packets. Then, these probe packets are used for scanning and identification. Experiments show that the fuzzy testing is effective and corresponding probe packet can acquire more features than other packets. These features are helpful for honeypot identification.
机译:在软芳工业网络中,蜜罐识别对于攻击者和后卫非常重要。现有的蜜罐识别依赖于蜜罐的简单特征。存在两个挑战:很容易模拟简单的功能,导致结果不准确,而高级功能依赖于高相互作用,从而导致安全风险。为了应对这些挑战,在本文中,我们提出了一种安全的模糊测试方法,用于漏洞采矿的启发的蜜罐识别。它利用错误处理来区分蜜罐和真实设备。具体而言,我们采用具有两个步骤的新型识别架构。首先,提出了一种多功能模糊测试。它采用突变规则和安全规则来生成有效和安全的探针数据包。然后,这些探测分组用于扫描和识别。实验表明,模糊测试是有效的,并且相应的探针包可以获得比其他数据包更多的特征。这些功能有助于蜜罐识别。

著录项

相似文献

  • 外文文献
  • 中文文献
  • 专利
获取原文

客服邮箱:kefu@zhangqiaokeyan.com

京公网安备:11010802029741号 ICP备案号:京ICP备15016152号-6 六维联合信息科技 (北京) 有限公司©版权所有
  • 客服微信

  • 服务号