Honeypot based Intrusion Detection System for Cyber Physical System

Abstract

An intrusion detection system is a software programme or hardware that keeps an eye out for malicious activities or policy breaches on a network or in a system. Any intrusion activity or violation is often recorded centrally using a security information and event management system, alerted to an administrator, or both. Cyber physical systems link physical infrastructure and things to the internet and to one another by integrating sensing, computing, control, and networking into them. As a result, cyber assaults on the cyber-physical system can make the devices malfunction, and adequate intrusion detection is needed to protect the system. An essential tool for detecting network intrusion is a honeypot. Honeypots not only engage the attacker but also collect information that may be used to understand attacks and attackers on the network. As a result, the aim of the paper is to construct honeypot to catch attacks. Once an intrusion caused by the attacker is caught, the process of assaulting the system is stopped. The logs are also recorded so that network activity can be properly analysed.