Resilient Cyber-Physical System Honeypots for Cyberattacker Engagement

Industrial cyber-physical systems (CPSs) are increasingly facing sophisticated threats. As such, understanding the evolving strategies of cyberattacks is vital for proactive defense. CPS honeypots represent an effective tool for distracting cyberattackers from actual targets, while gleaning insights into their strategies. This article proposes a novel CPS honeypot framework that leverages rich physical models to deceive threat actors, extend their engagement, and glean valuable data. We propose the use of safety critical control to adaptively resist attackers luring them into further engagement providing deeper insights into their tactics. A microgrid-based case study demonstrates the honeypot’s ability to handle intelligent attack scenarios, ensuring prolonged engagement without compromising covertness, as well as the potential of CPS honeypots to enhance threat intelligence.