一种面向工控设备基于蜜点的流量绊线生成方法及系统
By constructing a traffic tripwire generation model, identifying and generating decoy data, embedding it into industrial control protocol frames, and actively releasing decoy traffic, the passive defense and high cost problems of existing industrial control honeypot technologies are solved, achieving highly realistic adaptive defense and enhancing the active defense capabilities of industrial control systems.
Patent Information
- Authority / Receiving Office
- CN · China
- Patent Type
- Patents(China)
- Current Assignee / Owner
- GUANGZHOU UNIVERSITY
- Filing Date
- 2026-04-03
- Publication Date
- 2026-07-17
AI Technical Summary
Existing industrial control honeypot technologies suffer from problems such as lagging passive defense, insufficient depth of simulation interaction, lack of adaptive capabilities in static strategies, and high deployment and maintenance costs, making it difficult to effectively deal with advanced persistent threats to industrial control systems.
A honeypot-based traffic tripwire generation method is adopted. By constructing a traffic tripwire load generation model, sensitive fields are identified and decoy data is generated and embedded into the industrial control protocol frame. The decoy traffic is actively released to simulate the behavior of real industrial control equipment, dynamically deceive attackers, and achieve adaptive defense.
It achieves proactive detection, dynamic deception, and adaptive defense against potential attacks, reducing deployment and maintenance costs, enhancing the adversarial nature and simulation depth of the defense system, and reducing the risk of attacker identification.
Smart Images
Figure CN121967096B_ABST