Industrial Control Systems Honeypot: A Formal Analysis of Conpot

Technologies used in ICS and Smart Grid are overlapping. The most discussed attacks on ICSs Stuxnet Black energy malware. anatomy of these not only pointed out that the security is prime concern but also demanded to execute a proactive approach practicing security. Honeypot implement defensive measures for Honeynet group released labelled as Conpot 2013. Though low interactive Honeypot, it emulates processes different cyber-physical systems, typically Grid. In literature, effectiveness operations was studied by challenging limitations existing setup or proposing new variants. Similar approaches followed evaluation. However, none work addressed formal verification method verify engagement this makes presented unique. For proposed work, Coloured Petri Net (CPN) tool Conpot. variants modelled, including initial state model, deadlock model livelock model. Further evaluation models based space analysis results confirmed could lure an attacker engaging him infinite loop thereby limiting scope from exploring damaging real-time systems services. state, attacker’s activity conpot will be restricted unable proceed further incorporates loop.