{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2026,5,4]],"date-time":"2026-05-04T11:05:16Z","timestamp":1777892716438,"version":"3.51.4"},"publisher-location":"New York, NY, USA","reference-count":28,"publisher":"ACM","license":[{"start":{"date-parts":[[2023,8,29]],"date-time":"2023-08-29T00:00:00Z","timestamp":1693267200000},"content-version":"vor","delay-in-days":0,"URL":"https:\/\/creativecommons.org\/licenses\/by\/4.0\/"}],"content-domain":{"domain":["dl.acm.org"],"crossmark-restriction":true},"short-container-title":[],"published-print":{"date-parts":[[2023,8,29]]},"DOI":"10.1145\/3600160.3605020","type":"proceedings-article","created":{"date-parts":[[2023,8,9]],"date-time":"2023-08-09T22:54:41Z","timestamp":1691621681000},"page":"1-10","update-policy":"https:\/\/doi.org\/10.1145\/crossmark-policy","source":"Crossref","is-referenced-by-count":7,"title":["ICSvertase: A Framework for Purpose-based Design and Classification of ICS Honeypots"],"prefix":"10.1145","author":[{"ORCID":"https:\/\/orcid.org\/0009-0001-6246-6602","authenticated-orcid":false,"given":"Stash","family":"Kempinski","sequence":"first","affiliation":[{"name":"Eindhoven University of Technology, Netherlands and Secura, Netherlands"}],"role":[{"role":"author","vocabulary":"crossref"}]},{"ORCID":"https:\/\/orcid.org\/0009-0004-5590-0249","authenticated-orcid":false,"given":"Shuaib","family":"Ichaarine","sequence":"additional","affiliation":[{"name":"Eindhoven University of Technology, Netherlands"}],"role":[{"role":"author","vocabulary":"crossref"}]},{"ORCID":"https:\/\/orcid.org\/0000-0003-0974-3639","authenticated-orcid":false,"given":"Savio","family":"Sciancalepore","sequence":"additional","affiliation":[{"name":"Eindhoven University of Technology, Netherlands"}],"role":[{"role":"author","vocabulary":"crossref"}]},{"ORCID":"https:\/\/orcid.org\/0000-0002-8079-4087","authenticated-orcid":false,"given":"Emmanuele","family":"Zambon","sequence":"additional","affiliation":[{"name":"Eindhoven University of Technology, Netherlands"}],"role":[{"role":"author","vocabulary":"crossref"}]}],"member":"320","published-online":{"date-parts":[[2023,8,29]]},"reference":[{"key":"e_1_3_2_1_1_1","doi-asserted-by":"publisher","DOI":"10.1145\/2994487.2994493"},{"key":"e_1_3_2_1_2_1","volume-title":"2019 IEEE International Conference on Systems, Man and Cybernetics (SMC).","author":"Bernieri G.","unstructured":"G. Bernieri, M. Conti, and F. Pascucci. 2019. MimePot: a Model-based Honeypot for Industrial Control Networks. In 2019 IEEE International Conference on Systems, Man and Cybernetics (SMC)."},{"key":"e_1_3_2_1_3_1","volume-title":"Proceedings of the 16th International Conference on Availability, Reliability and Security.","author":"Bistarelli S.","unstructured":"S. Bistarelli, E. Bosimini, and F. Santini. 2021. A Medium-Interaction Emulation and Monitoring System for Operational Technology. In Proceedings of the 16th International Conference on Availability, Reliability and Security."},{"key":"e_1_3_2_1_4_1","doi-asserted-by":"crossref","unstructured":"D. Buza F. Juh\u00e1sz G. Miru 2014. CryPLH: Protecting Smart Energy Systems from Targeted Attacks with a PLC Honeypot. In Smart Grid Security.","DOI":"10.1007\/978-3-319-10329-7_12"},{"key":"e_1_3_2_1_5_1","volume":"201","author":"Cao J.","unstructured":"J. Cao, W. Li, J. Li, 2018. DiPot: A Distributed Industrial Honeypot System. In Smart Computing and Communication.","journal-title":"J. Li"},{"key":"e_1_3_2_1_6_1","volume-title":"2020 12th International Conference on Cyber Conflict (CyCon).","author":"Dodson M.","unstructured":"M. Dodson, A. Beresford, and M. Vingaard. 2020. Using Global Honeypot Networks to Detect Targeted ICS Attacks. In 2020 12th International Conference on Cyber Conflict (CyCon)."},{"key":"e_1_3_2_1_7_1","doi-asserted-by":"publisher","DOI":"10.1109\/JSYST.2017.2762161"},{"key":"e_1_3_2_1_8_1","volume-title":"Industrial Internet of Things, and Cyber-Physical Systems","author":"Franco J.","year":"2021","unstructured":"J. Franco, A. Aris, B. Canberk, 2021. A Survey of Honeypots and Honeynets for Internet of Things, Industrial Internet of Things, and Cyber-Physical Systems. IEEE Communications Surveys Tutorials (2021)."},{"key":"e_1_3_2_1_9_1","doi-asserted-by":"publisher","DOI":"10.1145\/3055186.3055192"},{"key":"e_1_3_2_1_10_1","volume-title":"Caught in the Act: Running a Realistic Factory Honeypot to Capture Real Threats. Trend Micro Research","author":"Hilt S.","year":"2020","unstructured":"S. Hilt, F. Maggi, C. Perine, 2020. Caught in the Act: Running a Realistic Factory Honeypot to Capture Real Threats. Trend Micro Research (2020)."},{"key":"e_1_3_2_1_11_1","volume-title":"OTCAD: Operational Technology Cyber Attack Database. Secura. Retrieved 2023-01-22 from https:\/\/www.secura.com\/whitepapers\/otcad","author":"Kempinski S.","year":"2021","unstructured":"S. Kempinski. 2021. OTCAD: Operational Technology Cyber Attack Database. Secura. Retrieved 2023-01-22 from https:\/\/www.secura.com\/whitepapers\/otcad"},{"key":"e_1_3_2_1_12_1","unstructured":"S. Kempinski S. Ichaarine S. Sciancalepore and E. Zambon. 2023. GitHub Page of the ICSvertase Project. https:\/\/github.com\/StashK\/ICSvertase"},{"key":"e_1_3_2_1_13_1","volume-title":"Possibilities and Limitations of Cyber Threat Intelligence in Energy Systems. In 2021 13th International Conference on Cyber Conflict (CyCon).","author":"Krasznay C.","unstructured":"C. Krasznay and G. Gyebn\u00e1r. 2021. Possibilities and Limitations of Cyber Threat Intelligence in Energy Systems. In 2021 13th International Conference on Cyber Conflict (CyCon)."},{"key":"e_1_3_2_1_14_1","unstructured":"R. Lee M. Assante and T. Conway. 2016. Analysis of the Cyber Attack on the Ukrainian Power Grid. SANS (2016)."},{"key":"e_1_3_2_1_15_1","doi-asserted-by":"publisher","DOI":"10.1145\/3372297.3423356"},{"key":"e_1_3_2_1_16_1","unstructured":"S. Miller N. Brubaker D.\u00a0Kapellmann Zafra 2019. TRITON Actor TTP Profile Custom Attack Tools Detections and ATT&CK Mapping. Retrieved 2023-01-04 from https:\/\/www.mandiant.com\/resources\/blog\/triton-actor-ttp-profile-custom-attack-tools-detections"},{"key":"e_1_3_2_1_17_1","doi-asserted-by":"publisher","DOI":"10.1016\/j.ijcip.2021.100464"},{"key":"e_1_3_2_1_18_1","first-page":"01","volume":"202","author":"MITRE.","unstructured":"MITRE. 2022. ATT&CK for ICS. Retrieved 2023-01-22 from https:\/\/attack.mitre.org\/matrices\/ics\/","journal-title":"Retrieved"},{"key":"e_1_3_2_1_19_1","first-page":"01","volume":"202","author":"MITRE.","unstructured":"MITRE. 2022. Engage. Retrieved 2023-01-22 from https:\/\/engage.mitre.org\/","journal-title":"Engage. Retrieved"},{"key":"e_1_3_2_1_20_1","doi-asserted-by":"publisher","DOI":"10.1109\/CAMAD.2019.8858431"},{"key":"e_1_3_2_1_21_1","unstructured":"V. Pothamsetty and M. Franz. 2005. SCADA HoneyNet Project: Building Honeypots for Industrial Networks. Retrieved 2023-01-23 from https:\/\/scadahoneynet.sourceforge.net\/"},{"key":"e_1_3_2_1_22_1","doi-asserted-by":"publisher","DOI":"10.1109\/SP46214.2022.9833730"},{"key":"e_1_3_2_1_23_1","volume-title":"The Wireless Honeypot Monitoring the Attacker","author":"Siles R.","unstructured":"R. Siles. 2007. HoneySpot : The Wireless Honeypot Monitoring the Attacker \u2019 s Activities in Wireless Networks A design and architectural overview."},{"key":"e_1_3_2_1_24_1","volume-title":"The Value of Honeypots","author":"Spitzner L.","year":"2023","unstructured":"L. Spitzner. 2001. The Value of Honeypots, Part One: Definitions and Values of Honeypots. Retrieved 2023-01-22 from http:\/\/www.symantec.com\/connect\/articles\/value-honeypots-part-one-definitions-and-values-honeypots"},{"key":"e_1_3_2_1_25_1","doi-asserted-by":"publisher","DOI":"10.1109\/NOMS.2016.7502992"},{"key":"e_1_3_2_1_26_1","doi-asserted-by":"crossref","unstructured":"F. Xiao E. Chen and Q. Xu. 2018. S7commTrace: A High Interactive Honeypot for Industrial Control System Based on S7 Protocol. In Information and Communications Security.","DOI":"10.1007\/978-3-319-89500-0_36"},{"key":"e_1_3_2_1_27_1","volume-title":"HoneyVP: A Cost-Effective Hybrid Honeypot Architecture for Industrial Control Systems. In ICC 2021 - IEEE International Conference on Communications.","author":"You J.","year":"2021","unstructured":"J. You, S. Lv, Y. Sun, 2021. HoneyVP: A Cost-Effective Hybrid Honeypot Architecture for Industrial Control Systems. In ICC 2021 - IEEE International Conference on Communications."},{"key":"e_1_3_2_1_28_1","doi-asserted-by":"publisher","DOI":"10.14722\/ndss.2014.23229"}],"event":{"name":"ARES 2023: The 18th International Conference on Availability, Reliability and Security","location":"Benevento Italy","acronym":"ARES 2023"},"container-title":["Proceedings of the 18th International Conference on Availability, Reliability and Security"],"original-title":[],"link":[{"URL":"https:\/\/dl.acm.org\/doi\/10.1145\/3600160.3605020","content-type":"unspecified","content-version":"vor","intended-application":"text-mining"},{"URL":"https:\/\/dl.acm.org\/doi\/pdf\/10.1145\/3600160.3605020","content-type":"unspecified","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2025,6,17]],"date-time":"2025-06-17T17:49:16Z","timestamp":1750182556000},"score":1,"resource":{"primary":{"URL":"https:\/\/dl.acm.org\/doi\/10.1145\/3600160.3605020"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2023,8,29]]},"references-count":28,"alternative-id":["10.1145\/3600160.3605020","10.1145\/3600160"],"URL":"https:\/\/doi.org\/10.1145\/3600160.3605020","relation":{},"subject":[],"published":{"date-parts":[[2023,8,29]]},"assertion":[{"value":"2023-08-29","order":3,"name":"published","label":"Published","group":{"name":"publication_history","label":"Publication History"}}]}}