Raising the quality of a honeypot system for a transmission system operator based on publicly available data

Mamci su računalni sustavi koji se koriste za privlačenje napadača s ciljem učenja o njihovim metodama. U radu su opisani ključni pojmovi vezani uz operatere prijenosnih sustava i industrijske upravljačke sustave i dani opisi nekoliko mamaca. Raniji prototip mamca nadograđen je boljim grafičkim sučeljem i neuspješno je dodan čvor koji simulira programibilni logički kontroler. Istražen je pojam javno dostupnih informacija, predstavljeni alati za istraživanje javno dostupnih informacija i dani prijedlozi poboljšanje mamca korištenjem javno dostupnih podataka. Postoji mnoštvo dostupnih mamaca otvorenog koda različitih razina složenosti. U mrežu je dodan HoneyPLC mamac koji koristi nekoliko zastarjelih biblioteka koje su otežale proces instalacije mamca, i zbog greške u kodu nepoznatog izvora dodani čvor nije funkcionalan.Honeypots are computer systems used for attracting attackers with the goal of learning about their methods. The paper describes key concepts related to transmission system operators and industrial control systems and gives descriptions of several honeypots. An earlier prototype of a honeypot was upgraded with a better graphical interface and an unsuccessful attempt was made of adding a node that simulates a programmable logic controller. The concept of publicly available data was explored, tools for exploring publicly available data were presented and suggestions for the improvement of the honeypot based on publicly available data were given. There are many open source honeypots of different levels of complexity. The HoneyPLC honeypot was added to the network, which uses several outdated libraries that made the process of installing the honeypot more difficult, and due to an error in the code of unknown origin, the added node is not functional