We had the SCADA Honeynet attached to a wireless access point at the PCSF Annual Meeting March 6 and 7 in Atlanta, GA. PCSF attendees were encouraged to connect to it to check out the realism of this simulated PLC target and attack it as much as they desired. Of course, others connected simply looking for free Internet service.

Landon analyzed the results from those two days, and he and I wrote up a white paper full of screen shots and explanations. Readers unfamiliar with Honeynets will get a better idea of their capabilities and Honeynet pro’s will see the integration of the support for control system protocols – - in this case Modbus TCP.

The PCSF attendees had some fun with the SCADA Honeynet. There were over 3,000 connections on March 6 and over 10,000 connections on March 7.  Some of the attendees brought their Modbus clients and others used automatic attack tools. We learned some useful information based on this pounding and will be making enhancements.

Remember Digitial Bond subscribers can download the SCADA Honeynet VMware server images. If you have any questions or suggestions for the SCADA Honeynet contact Landon Lewis at lewis@digitalbond.com.