Model-driven Deception for Control System Environments

Abstract

Deception techniques are a useful defensive mechanism that could be very valuable in control systems where updates and patches can be difficult. However, to deceive a motivated and targeted attacker it is necessary to enhance deception platforms with capabilities to model and simulate physical processes to achieve necessary fidelity. In this paper, attributes of cyberphysical decoys are discussed and design of a system with these attributes is presented. A boiler model use case is provided to demonstrate how this novel deception capability can be integrated into and used to defend a system.