{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2026,8,18]],"date-time":"2026-08-18T01:44:13Z","timestamp":1787017453890,"version":"build-2736575974"},"publisher-location":"New York, NY, USA","reference-count":56,"publisher":"ACM","license":[{"start":{"date-parts":[[2023,8,29]],"date-time":"2023-08-29T00:00:00Z","timestamp":1693267200000},"content-version":"vor","delay-in-days":0,"URL":"https:\/\/www.acm.org\/publications\/policies\/copyright_policy#Background"}],"content-domain":{"domain":["dl.acm.org"],"crossmark-restriction":true},"short-container-title":[],"published-print":{"date-parts":[[2023,8,29]]},"DOI":"10.1145\/3600160.3604984","type":"proceedings-article","created":{"date-parts":[[2023,8,9]],"date-time":"2023-08-09T18:54:41Z","timestamp":1691607281000},"page":"1-10","update-policy":"https:\/\/doi.org\/10.1145\/crossmark-policy","source":"Crossref","is-referenced-by-count":23,"title":["HoneyICS: A High-interaction Physics-aware Honeynet for Industrial Control Systems"],"prefix":"10.1145","author":[{"ORCID":"https:\/\/orcid.org\/0000-0002-4770-5441","authenticated-orcid":false,"given":"Marco","family":"Lucchese","sequence":"first","affiliation":[{"name":"University of Verona, Italy"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"ORCID":"https:\/\/orcid.org\/0000-0003-0775-6890","authenticated-orcid":false,"given":"Francesco","family":"Lupia","sequence":"additional","affiliation":[{"name":"University of Calabria, Italy"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"ORCID":"https:\/\/orcid.org\/0000-0002-1712-7492","authenticated-orcid":false,"given":"Massimo","family":"Merro","sequence":"additional","affiliation":[{"name":"University of Verona, Italy"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"ORCID":"https:\/\/orcid.org\/0000-0003-3122-0236","authenticated-orcid":false,"given":"Federica","family":"Paci","sequence":"additional","affiliation":[{"name":"University of Verona, Italy"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"ORCID":"https:\/\/orcid.org\/0000-0002-9081-5996","authenticated-orcid":false,"given":"Nicola","family":"Zannone","sequence":"additional","affiliation":[{"name":"Eindhoven University of Technology, Netherlands"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"ORCID":"https:\/\/orcid.org\/0000-0003-2537-8918","authenticated-orcid":false,"given":"Angelo","family":"Furfaro","sequence":"additional","affiliation":[{"name":"University of Calabria, Italy"}],"role":[{"vocabulary":"crossref","role":"author"}]}],"member":"320","published-online":{"date-parts":[[2023,8,29]]},"reference":[{"key":"e_1_3_2_1_1_1","unstructured":"2009. The ScadaBR project. https:\/\/www.scadabr.com.br\/"},{"key":"e_1_3_2_1_2_1","unstructured":"2013. Kibana. https:\/\/www.elastic.co\/kibana\/"},{"key":"e_1_3_2_1_3_1","unstructured":"2016. S7comm - The Wireshark Wiki. https:\/\/wiki.wireshark.org\/S7comm\/"},{"key":"e_1_3_2_1_4_1","unstructured":"2021. Scada-LTS. https:\/\/scada-lts.org\/"},{"key":"e_1_3_2_1_5_1","unstructured":"2022. GreyNoise Inc.https:\/\/www.greynoise.io\/"},{"key":"e_1_3_2_1_6_1","unstructured":"2023. AlienVault OTX. https:\/\/otx.alienvault.com\/"},{"key":"e_1_3_2_1_7_1","unstructured":"2023. Aqua Tracee. https:\/\/www.aquasec.com\/products\/tracee\/"},{"key":"e_1_3_2_1_8_1","unstructured":"2023. Elastic Search. https:\/\/www.elastic.co\/"},{"key":"e_1_3_2_1_9_1","unstructured":"2023. Extended Berkeley Packet Filter. https:\/\/ebpf.io\/"},{"key":"e_1_3_2_1_10_1","unstructured":"2023. Macvlan network. https:\/\/docs.docker.com\/network\/macvlan\/"},{"key":"e_1_3_2_1_11_1","unstructured":"2023. MITRE ATT&CK Framework. https:\/\/attack.mitre.org\/"},{"key":"e_1_3_2_1_12_1","unstructured":"2023. VirusTotal. https:\/\/www.virustotal.com\/"},{"key":"e_1_3_2_1_13_1","doi-asserted-by":"crossref","unstructured":"A. Murillo L. Combita Alfonso A. Gonzalez S. Rueda A. Cardenas and N. Quijano. 2018. A Virtual Environment for Industrial Control Systems: A Nonlinear Use-Case in Attack Detection Identification and Response. In ICSS. 25\u201332.","DOI":"10.1145\/3295453.3295457"},{"key":"e_1_3_2_1_14_1","doi-asserted-by":"crossref","unstructured":"A. P. Mathur and N.O. Tippenhauer. 2016. SWaT: a water treatment testbed for research and training on ICS security. In CySWater@CPSWeek. IEEE 31\u201336.","DOI":"10.1109\/CySWater.2016.7469060"},{"key":"e_1_3_2_1_15_1","unstructured":"A. Swales. 1999. Open Modbus\/tcp specification. Schneider Electric 29 (1999)."},{"key":"e_1_3_2_1_16_1","first-page":"372","article-title":"Developing Deception Network System with Traceback Honeypot in ICS Network","volume":"11","author":"Abe S.","year":"2018","unstructured":"S. Abe, Y. Tanaka, Y. Uchida, and S. Horata. 2018. Developing Deception Network System with Traceback Honeypot in ICS Network. JCMSI 11 (2018), 372\u2013379.","journal-title":"JCMSI"},{"key":"e_1_3_2_1_17_1","volume-title":"An Introduction to Docker for Reproducible Research. SIGOPS Oper. Syst. Rev. ACM","author":"Boettiger C.","year":"2015","unstructured":"C. Boettiger. 2015. An Introduction to Docker for Reproducible Research. SIGOPS Oper. Syst. Rev. ACM (2015), 71\u201379."},{"key":"e_1_3_2_1_18_1","doi-asserted-by":"crossref","unstructured":"M. Conti F. Trolese and F. Turrin. 2022. ICSpot: A High-Interaction Honeypot for Industrial Control Systems. In ISNCC. IEEE 1\u20134.","DOI":"10.1109\/ISNCC55209.2022.9851732"},{"key":"e_1_3_2_1_19_1","doi-asserted-by":"crossref","unstructured":"D. Antonioli A. Agrawal and N.O. Tippenhauer. 2016. Towards High-Interaction Virtual ICS Honeypots-in-a-Box. In CPS-SPC. ACM 13\u201322.","DOI":"10.1145\/2994487.2994493"},{"key":"e_1_3_2_1_20_1","doi-asserted-by":"crossref","unstructured":"D. Pliatsios P.G. Sarigiannidis T. Liatifis K. Rompolos and I. Siniosoglou. 2019. A Novel and Interactive Industrial Control System Honeypot for Critical Smart Grid Infrastructure. In IEEE CAMAD. 1\u20136.","DOI":"10.1109\/CAMAD.2019.8858431"},{"key":"e_1_3_2_1_21_1","doi-asserted-by":"crossref","unstructured":"D.I. Buza F. Juh\u00e1sz G. Miru M. F\u00e9legyh\u00e1zi and T. Holczer. 2014. CryPLH: Protecting Smart Energy Systems from Targeted Attacks with a PLC Honeypot. In Smart Grid Security. Springer 181\u2013192.","DOI":"10.1007\/978-3-319-10329-7_12"},{"key":"e_1_3_2_1_22_1","doi-asserted-by":"crossref","unstructured":"E. Vasilomanolakis S. Srinivasa C.G. Cordero and M. M\u00fchlh\u00e4user. 2016. Multi-stage attack detection and signature generation with ICS honeypots. In NOMS IEEE. 1227\u20131232.","DOI":"10.1109\/NOMS.2016.7502992"},{"key":"e_1_3_2_1_23_1","doi-asserted-by":"crossref","unstructured":"P. Ferretti M. Pogliani and S. Zanero. 2019. Characterizing Background Noise in ICS Traffic Through a Set of Low Interaction Honeypots. In CPS-SPC@CCS. ACM 51\u201361.","DOI":"10.1145\/3338499.3357361"},{"key":"e_1_3_2_1_24_1","doi-asserted-by":"publisher","DOI":"10.1016\/j.simpat.2016.09.007"},{"key":"e_1_3_2_1_25_1","doi-asserted-by":"crossref","unstructured":"F. Furtado S. Shrivastava A. Mathur and N. Goh. 2022. The Design of Cyber-Physical Exercises (CPXs). In CyCon. IEEE.","DOI":"10.23919\/CyCon55549.2022.9811000"},{"key":"e_1_3_2_1_26_1","doi-asserted-by":"crossref","unstructured":"G. Bernieri M. Conti and F. Pascucci. 2019. MimePot: a Model-based Honeypot for Industrial Control Networks. In IEEE SMC. 433\u2013438.","DOI":"10.1109\/SMC.2019.8913891"},{"key":"e_1_3_2_1_27_1","doi-asserted-by":"crossref","unstructured":"G. Clarke D. Reynders and E. Wright. 2004. Practical Modern SCADA Protocols: DNP3 60870.5 and Related Systems. Newnes Elsevier.","DOI":"10.1016\/B978-075065799-0\/50019-X"},{"key":"e_1_3_2_1_28_1","unstructured":"G. Lyon. 1997. Nmap. https:\/\/nmap.org\/"},{"key":"e_1_3_2_1_29_1","volume-title":"Act: Running a Realistic Factory Honeypot to Capture Real Threats.","author":"Hilt S.","year":"2020","unstructured":"S. Hilt, F. Maggi, C. Perine, L. Remorin, M. R\u00f6sler, and R. Vosseler. 2020. Caught in the Act: Running a Realistic Factory Honeypot to Capture Real Threats."},{"key":"e_1_3_2_1_30_1","doi-asserted-by":"publisher","DOI":"10.1016\/j.ijcip.2009.06.001"},{"key":"e_1_3_2_1_31_1","volume-title":"Programmable controllers-Part 3 : Programming languages. IEC 61131-3","author":"International\u00a0Electrotechnical Commission","year":"1993","unstructured":"International\u00a0Electrotechnical Commission. 1993. Programmable controllers-Part 3 : Programming languages. IEC 61131-3 (1993)."},{"key":"e_1_3_2_1_32_1","doi-asserted-by":"crossref","unstructured":"J. Cao W. Li J. Li and B. Li. 2018. DiPot: A Distributed Industrial Honeypot System. Springer 300\u2013309.","DOI":"10.1007\/978-3-319-73830-7_30"},{"key":"e_1_3_2_1_33_1","volume-title":"Industrial Internet of Things, and Cyber-Physical Systems","author":"Franco J.","year":"2021","unstructured":"J. Franco, A. Aris, B. Canberk, and A. Selcuk Uluagac. 2021. A Survey of Honeypots and Honeynets for Internet of Things, Industrial Internet of Things, and Cyber-Physical Systems. IEEE Commun. Surv. Tutorials (2021), 2351\u20132383."},{"key":"e_1_3_2_1_34_1","unstructured":"J. Searle. 2015. PLCscan. https:\/\/github.com\/meeas\/plcscan\/"},{"key":"e_1_3_2_1_35_1","unstructured":"K. Wilhoit and S. Hilt. 2015. The GasPot Experiment: Unexamined Perils in Using Gas-Tank-Monitoring Systems. In Trend Micro Vol.\u00a06. 3\u201313."},{"key":"e_1_3_2_1_36_1","doi-asserted-by":"crossref","unstructured":"M. Krotofil K. Kursawe and D. Gollmann. 2019. Securing Industrial Control Systems. In Security and Privacy Trends in the Industrial Internet of Things. Springer 3\u201327.","DOI":"10.1007\/978-3-030-12330-7_1"},{"key":"e_1_3_2_1_37_1","doi-asserted-by":"crossref","unstructured":"S. Kuman S. Gros and M. Mikuc. 2017. An experiment in using IMUNES and Conpot to emulate honeypot control networks. In MIPRO. IEEE 1262\u20131268.","DOI":"10.23919\/MIPRO.2017.7973617"},{"key":"e_1_3_2_1_38_1","unstructured":"L. Rist J. Vestergaard D. Haslinger A. De Pasquale and J. Smith. 2013. Conpot ICS\/SCADA Honeypot. http:\/\/conpot.org\/"},{"key":"e_1_3_2_1_39_1","doi-asserted-by":"publisher","DOI":"10.1145\/3546579"},{"key":"e_1_3_2_1_40_1","doi-asserted-by":"publisher","DOI":"10.1145\/3373270"},{"key":"e_1_3_2_1_41_1","doi-asserted-by":"crossref","unstructured":"E. L\u00f3pez-Morales C. Rubio A. Doup\u00e9 Y. Shoshitaishvili R. Wang T. Bao and G-H Ahn. 2020. HoneyPLC: A Next-Generation Honeypot for Industrial Control Systems. ACM 279\u2013291.","DOI":"10.1145\/3372297.3423356"},{"key":"e_1_3_2_1_42_1","doi-asserted-by":"crossref","unstructured":"M. Lucchese M. Merro F. Paci and N. Zannone. 2023. Towards A High-Interaction Physics-Aware Honeynet for Industrial Control Systems. In 38th ACM\/SIGAPP SAC(SAC \u201923). ACM 76\u201379.","DOI":"10.1145\/3555776.3577803"},{"key":"e_1_3_2_1_43_1","doi-asserted-by":"crossref","unstructured":"M. Dodson A.R. Beresford and M. Vingaard. 2020. Using Global Honeypot Networks to Detect Targeted ICS Attacks. In CyCon. 275\u2013291.","DOI":"10.23919\/CyCon49761.2020.9131734"},{"key":"e_1_3_2_1_44_1","unstructured":"M. Kerrisk. 27-08-2021. ld.so(8) - Linux manual page. https:\/\/man7.org\/linux\/man-pages\/man8\/ld.so.8.html"},{"key":"e_1_3_2_1_45_1","unstructured":"MATLAB. 2021. version R2021a."},{"key":"e_1_3_2_1_46_1","volume-title":"Honeyd: A Virtual Honeypot Daemon (Extended Abstract). DFN-CERT 2","author":"Provos N.","year":"2003","unstructured":"N. Provos. 2003. Honeyd: A Virtual Honeypot Daemon (Extended Abstract). DFN-CERT 2 (2003)."},{"key":"e_1_3_2_1_47_1","unstructured":"D. Nardella. 2013. Snap7 project. http:\/\/snap7.sourceforge.net\/"},{"key":"e_1_3_2_1_48_1","doi-asserted-by":"crossref","unstructured":"O. Navarro S.A.J. Balbastre and S. Beyer. 2019. Gathering Intelligence Through Realistic Industrial Control System Honeypots - A Real-World Industrial Experience Report. In CRITIS Vol.\u00a011260. Springer 143\u2013153.","DOI":"10.1007\/978-3-030-05849-4_11"},{"key":"e_1_3_2_1_49_1","doi-asserted-by":"crossref","unstructured":"P. Brooks. 2001. Ethernet\/IP-industrial protocol. In ETFA Vol.\u00a02. 505\u2013514.","DOI":"10.1109\/ETFA.2001.997725"},{"key":"e_1_3_2_1_50_1","doi-asserted-by":"crossref","unstructured":"R. Rajkumar L. Lee I.\u00a0Sha and J.\u00a0A. Stankovic. 2010. Cyber-physical systems: the next computing revolution. In DAC. ACM 731\u2013736.","DOI":"10.1145\/1837274.1837461"},{"key":"e_1_3_2_1_51_1","doi-asserted-by":"crossref","unstructured":"E. Russo G. Costa G. Longo A. Armando and A. Merlo. 2023. LiDiTE: a Full-Fledged and Featherweight Digital Twin Framework. IEEE Transactions on Dependable and Secure Computing (2023) 1\u201314.","DOI":"10.1109\/TDSC.2023.3236798"},{"key":"e_1_3_2_1_52_1","first-page":"61","article-title":"OPC UA\u2013service-oriented architecture for industrial applications","volume":"48","author":"Leitner S-H.","year":"2006","unstructured":"S-H. Leitner and W. Mahnke. 2006. OPC UA\u2013service-oriented architecture for industrial applications. ABB Corporate Research Center 48, 61-66 (2006), 22.","journal-title":"ABB Corporate Research Center"},{"key":"e_1_3_2_1_53_1","doi-asserted-by":"publisher","DOI":"10.1109\/MIC.2016.103"},{"key":"e_1_3_2_1_54_1","unstructured":"T.R. Alves M. Buratto F.M. Souza and T.V. Rodrigues. 2014. OpenPLC: An open source alternative to automation. In IEEE GHTC. 585\u2013589."},{"key":"e_1_3_2_1_55_1","unstructured":"V. Pothamsetty and M. Franz. 2004. SCADA HoneyNet Project: Building Honeypots for Industrial Networks. (CIAG) Cisco Systems."},{"key":"e_1_3_2_1_56_1","doi-asserted-by":"publisher","DOI":"10.1016\/j.ijcip.2015.04.002"}],"event":{"name":"ARES 2023: The 18th International Conference on Availability, Reliability and Security","location":"Benevento Italy","acronym":"ARES 2023"},"container-title":["Proceedings of the 18th International Conference on Availability, Reliability and Security"],"original-title":[],"link":[{"URL":"https:\/\/dl.acm.org\/doi\/10.1145\/3600160.3604984","content-type":"unspecified","content-version":"vor","intended-application":"text-mining"},{"URL":"https:\/\/dl.acm.org\/doi\/pdf\/10.1145\/3600160.3604984","content-type":"unspecified","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2025,6,17]],"date-time":"2025-06-17T12:36:13Z","timestamp":1750163773000},"score":1,"resource":{"primary":{"URL":"https:\/\/dl.acm.org\/doi\/10.1145\/3600160.3604984"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2023,8,29]]},"references-count":56,"alternative-id":["10.1145\/3600160.3604984","10.1145\/3600160"],"URL":"https:\/\/doi.org\/10.1145\/3600160.3604984","relation":{},"subject":[],"published":{"date-parts":[[2023,8,29]]},"assertion":[{"value":"2023-08-29","order":3,"name":"published","label":"Published","group":{"name":"publication_history","label":"Publication History"}}]}}