{"id":"https://openalex.org/W4385713449","doi":"https://doi.org/10.1145/3600160.3605020","title":"ICSvertase: A Framework for Purpose-based Design and Classification of ICS Honeypots","display_name":"ICSvertase: A Framework for Purpose-based Design and Classification of ICS Honeypots","publication_year":2023,"publication_date":"2023-08-09","ids":{"openalex":"https://openalex.org/W4385713449","doi":"https://doi.org/10.1145/3600160.3605020"},"language":"en","primary_location":{"id":"doi:10.1145/3600160.3605020","is_oa":true,"landing_page_url":"https://doi.org/10.1145/3600160.3605020","pdf_url":"https://dl.acm.org/doi/pdf/10.1145/3600160.3605020","source":null,"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Proceedings of the 18th International Conference on Availability, Reliability and Security","raw_type":"proceedings-article"},"type":"conference-paper","indexed_in":["crossref"],"open_access":{"is_oa":true,"oa_status":"gold","oa_url":"https://dl.acm.org/doi/pdf/10.1145/3600160.3605020","any_repository_has_fulltext":true},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5090323516","display_name":"Stash Kempinski","orcid":"https://orcid.org/0009-0001-6246-6602"},"institutions":[{"id":"https://openalex.org/I83019370","display_name":"Eindhoven University of Technology","ror":"https://ror.org/02c2kyt77","country_code":"NL","type":"education","lineage":["https://openalex.org/I83019370"]}],"countries":["NL"],"is_corresponding":false,"raw_author_name":"Stash Kempinski","raw_affiliation_strings":["Eindhoven University of Technology, Netherlands and Secura, Netherlands"],"raw_orcid":"https://orcid.org/0009-0001-6246-6602","affiliations":[{"raw_affiliation_string":"Eindhoven University of Technology, Netherlands and Secura, Netherlands","institution_ids":["https://openalex.org/I83019370"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5092622364","display_name":"Shuaib Ichaarine","orcid":"https://orcid.org/0009-0004-5590-0249"},"institutions":[{"id":"https://openalex.org/I83019370","display_name":"Eindhoven University of Technology","ror":"https://ror.org/02c2kyt77","country_code":"NL","type":"education","lineage":["https://openalex.org/I83019370"]}],"countries":["NL"],"is_corresponding":false,"raw_author_name":"Shuaib Ichaarine","raw_affiliation_strings":["Eindhoven University of Technology, Netherlands"],"raw_orcid":"https://orcid.org/0009-0004-5590-0249","affiliations":[{"raw_affiliation_string":"Eindhoven University of Technology, Netherlands","institution_ids":["https://openalex.org/I83019370"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5088679207","display_name":"Savio Sciancalepore","orcid":"https://orcid.org/0000-0003-0974-3639"},"institutions":[{"id":"https://openalex.org/I83019370","display_name":"Eindhoven University of Technology","ror":"https://ror.org/02c2kyt77","country_code":"NL","type":"education","lineage":["https://openalex.org/I83019370"]}],"countries":["NL"],"is_corresponding":false,"raw_author_name":"Savio Sciancalepore","raw_affiliation_strings":["Eindhoven University of Technology, Netherlands"],"raw_orcid":"https://orcid.org/0000-0003-0974-3639","affiliations":[{"raw_affiliation_string":"Eindhoven University of Technology, Netherlands","institution_ids":["https://openalex.org/I83019370"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5073853248","display_name":"Emmanuele Zambon","orcid":"https://orcid.org/0000-0002-8079-4087"},"institutions":[{"id":"https://openalex.org/I83019370","display_name":"Eindhoven University of Technology","ror":"https://ror.org/02c2kyt77","country_code":"NL","type":"education","lineage":["https://openalex.org/I83019370"]}],"countries":["NL"],"is_corresponding":false,"raw_author_name":"Emmanuele Zambon","raw_affiliation_strings":["Eindhoven University of Technology, Netherlands"],"raw_orcid":"https://orcid.org/0000-0002-8079-4087","affiliations":[{"raw_affiliation_string":"Eindhoven University of Technology, Netherlands","institution_ids":["https://openalex.org/I83019370"]}]}],"institutions":[],"countries_distinct_count":1,"institutions_distinct_count":1,"corresponding_author_ids":[],"corresponding_institution_ids":["https://openalex.org/I83019370"],"apc_list":null,"apc_paid":null,"fwci":3.9074,"has_fulltext":true,"cited_by_count":7,"citation_normalized_percentile":{"value":0.95302903,"is_in_top_1_percent":false,"is_in_top_10_percent":true},"cited_by_percentile_year":{"min":89,"max":98},"biblio":{"volume":null,"issue":null,"first_page":"1","last_page":"10"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T10917","display_name":"Smart Grid Security and Resilience","score":0.9995999932289124,"subfield":{"id":"https://openalex.org/subfields/2207","display_name":"Control and Systems Engineering"},"field":{"id":"https://openalex.org/fields/22","display_name":"Engineering"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T10917","display_name":"Smart Grid Security and Resilience","score":0.9995999932289124,"subfield":{"id":"https://openalex.org/subfields/2207","display_name":"Control and Systems Engineering"},"field":{"id":"https://openalex.org/fields/22","display_name":"Engineering"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11241","display_name":"Advanced Malware Detection Techniques","score":0.9993000030517578,"subfield":{"id":"https://openalex.org/subfields/1711","display_name":"Signal Processing"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T10400","display_name":"Network Security and Intrusion Detection","score":0.996999979019165,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/honeypot","display_name":"Honeypot","score":0.9969001412391663},{"id":"https://openalex.org/keywords/computer-science","display_name":"Computer science","score":0.6980161666870117},{"id":"https://openalex.org/keywords/adversary","display_name":"Adversary","score":0.6179848313331604},{"id":"https://openalex.org/keywords/software-deployment","display_name":"Software deployment","score":0.521573007106781},{"id":"https://openalex.org/keywords/scheme","display_name":"Scheme (mathematics)","score":0.5146051645278931},{"id":"https://openalex.org/keywords/computer-security","display_name":"Computer security","score":0.4391680359840393},{"id":"https://openalex.org/keywords/software-engineering","display_name":"Software engineering","score":0.3437376618385315}],"concepts":[{"id":"https://openalex.org/C191267431","wikidata":"https://www.wikidata.org/wiki/Q911932","display_name":"Honeypot","level":2,"score":0.9969001412391663},{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.6980161666870117},{"id":"https://openalex.org/C41065033","wikidata":"https://www.wikidata.org/wiki/Q2825412","display_name":"Adversary","level":2,"score":0.6179848313331604},{"id":"https://openalex.org/C105339364","wikidata":"https://www.wikidata.org/wiki/Q2297740","display_name":"Software deployment","level":2,"score":0.521573007106781},{"id":"https://openalex.org/C77618280","wikidata":"https://www.wikidata.org/wiki/Q1155772","display_name":"Scheme (mathematics)","level":2,"score":0.5146051645278931},{"id":"https://openalex.org/C38652104","wikidata":"https://www.wikidata.org/wiki/Q3510521","display_name":"Computer security","level":1,"score":0.4391680359840393},{"id":"https://openalex.org/C115903868","wikidata":"https://www.wikidata.org/wiki/Q80993","display_name":"Software engineering","level":1,"score":0.3437376618385315},{"id":"https://openalex.org/C33923547","wikidata":"https://www.wikidata.org/wiki/Q395","display_name":"Mathematics","level":0,"score":0.0},{"id":"https://openalex.org/C134306372","wikidata":"https://www.wikidata.org/wiki/Q7754","display_name":"Mathematical analysis","level":1,"score":0.0}],"mesh":[],"locations_count":2,"locations":[{"id":"doi:10.1145/3600160.3605020","is_oa":true,"landing_page_url":"https://doi.org/10.1145/3600160.3605020","pdf_url":"https://dl.acm.org/doi/pdf/10.1145/3600160.3605020","source":null,"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Proceedings of the 18th International Conference on Availability, Reliability and Security","raw_type":"proceedings-article"},{"id":"pmh:oai:pure.tue.nl:openaire_cris_publications/256248cb-283c-4e35-8f0c-dcdbd2bf58c7","is_oa":true,"landing_page_url":"https://research.tue.nl/en/publications/256248cb-283c-4e35-8f0c-dcdbd2bf58c7","pdf_url":"https://pure.tue.nl/ws/files/345460891/3600160.3605020.pdf","source":{"id":"https://openalex.org/S4406922641","display_name":"TU/e Research Portal","issn_l":null,"issn":null,"is_oa":false,"is_in_doaj":false,"is_core":false,"host_organization":null,"host_organization_name":null,"host_organization_lineage":[],"host_organization_lineage_names":[],"type":"repository"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"submittedVersion","is_accepted":false,"is_published":false,"raw_source_name":"Kempinski, S, Ichaarine, S, Sciancalepore, S & Zambon, E 2023, ICSvertase : A Framework for Purpose-based Design and Classification of ICS Honeypots. in ARES '23 : Proceedings of the 18th International Conference on Availability, Reliability and Security., 114, Association for Computing Machinery, Inc., New York, 18th International Conference on Availability, Reliability and Security, ARES 2023, Benevento, Italy, 29/08/23. https://doi.org/10.1145/3600160.3605020","raw_type":"info:eu-repo/semantics/conferenceObject"}],"best_oa_location":{"id":"doi:10.1145/3600160.3605020","is_oa":true,"landing_page_url":"https://doi.org/10.1145/3600160.3605020","pdf_url":"https://dl.acm.org/doi/pdf/10.1145/3600160.3605020","source":null,"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Proceedings of the 18th International Conference on Availability, Reliability and Security","raw_type":"proceedings-article"},"sustainable_development_goals":[{"id":"https://metadata.un.org/sdg/9","display_name":"Industry, innovation and infrastructure","score":0.6200000047683716}],"awards":[{"id":"https://openalex.org/G3701263333","display_name":"An Internet of Secure Things - INTERSECT","funder_award_id":"NWA.1160.18.301","funder_id":"https://openalex.org/F4320321800","funder_display_name":"Nederlandse Organisatie voor Wetenschappelijk Onderzoek"},{"id":"https://openalex.org/G5994511833","display_name":"Deep packet intelligence for industrial contol systems","funder_award_id":"628.001.032","funder_id":"https://openalex.org/F4320321800","funder_display_name":"Nederlandse Organisatie voor Wetenschappelijk Onderzoek"}],"funders":[{"id":"https://openalex.org/F4320321800","display_name":"Nederlandse Organisatie voor Wetenschappelijk Onderzoek","ror":"https://ror.org/04jsz6e67"}],"has_content":{"grobid_xml":true,"pdf":true},"content_urls":{"pdf":"https://content.openalex.org/works/W4385713449.pdf","grobid_xml":"https://content.openalex.org/works/W4385713449.grobid-xml"},"referenced_works_count":18,"referenced_works":["https://openalex.org/W313385724","https://openalex.org/W377362545","https://openalex.org/W2043118292","https://openalex.org/W2462751245","https://openalex.org/W2540831950","https://openalex.org/W2579739707","https://openalex.org/W2607460355","https://openalex.org/W2796752342","https://openalex.org/W2980139159","https://openalex.org/W3108707471","https://openalex.org/W3186345182","https://openalex.org/W3187251708","https://openalex.org/W3188748135","https://openalex.org/W4213340281","https://openalex.org/W4240718936","https://openalex.org/W4288057737","https://openalex.org/W4400977496","https://openalex.org/W6747843298"],"related_works":["https://openalex.org/W2789663798","https://openalex.org/W2375896275","https://openalex.org/W2166943775","https://openalex.org/W1903420481","https://openalex.org/W2158007046","https://openalex.org/W2775236000","https://openalex.org/W2071426633","https://openalex.org/W2349754162","https://openalex.org/W3212927647","https://openalex.org/W4286859165"],"abstract_inverted_index":{"As":[0],"attacks":[1],"on":[2],"Industrial":[3],"Control":[4],"Systems":[5],"(ICS)":[6],"are":[7,59],"increasing,":[8],"the":[9,54,62,90,126,160],"design":[10],"and":[11,25,130,136,150,170,191],"deployment":[12],"of":[13,92],"ICS":[14,29,57,71,94,118,129,164,168],"honeypots":[15,44,58],"is":[16,68],"gaining":[17],"momentum":[18],"as":[19,158],"a":[20,110,144,175],"way":[21],"to":[22,40,73,87,147,194],"prevent,":[23],"detect,":[24],"research":[26],"them.":[27],"However,":[28],"honeypot":[30,95],"creators":[31],"hardly":[32],"explicitly":[33],"consider":[34],"what":[35],"adversary":[36],"behavior":[37],"they":[38],"want":[39],"capture,":[41],"potentially":[42],"creating":[43],"that":[45],"may":[46],"not":[47],"completely":[48],"fulfill":[49],"their":[50,97,195],"intended":[51],"purpose.":[52],"At":[53],"same":[55],"time,":[56],"classified":[60],"using":[61],"traditional":[63,196],"interaction":[64],"level":[65],"scheme":[66],"which":[67],"unsuitable":[69],"for":[70,84,96,114,128,186],"due":[72],"its":[74],"unique":[75],"properties.":[76],"In":[77],"turn,":[78],"these":[79,102,187],"issues":[80],"make":[81],"it":[82],"hard":[83],"potential":[85],"users":[86,151],"systematically":[88],"determine":[89],"suitability":[91],"an":[93],"use":[98,155,189],"case.":[99],"To":[100,179],"tackle":[101],"problems,":[103],"in":[104,152,174],"this":[105],"paper":[106],"we":[107,183],"introduce":[108],"ICSvertase,":[109],"novel":[111,140,145],"framework":[112],"allowing":[113],"structural":[115],"reasoning":[116],"about":[117],"honeypots.":[119],"ICSvertase":[120,142],"integrates":[121],"several":[122,153],"existing":[123,163,172],"components":[124],"from":[125],"ATT&CK":[127],"Engage":[131],"frameworks":[132],"provided":[133],"by":[134],"MITRE":[135],"extends":[137],"them":[138,193],"with":[139],"elements.":[141],"provides":[143],"approach":[146],"helping":[148],"companies":[149],"real-world":[154,188],"cases,":[156],"such":[157],"choosing":[159],"most":[161],"suitable":[162],"honeypot,":[165],"designing":[166],"new":[167],"honeypots,":[169],"classifying":[171],"ones":[173],"more":[176],"fine-grained":[177],"way.":[178],"show":[180],"ICSvertase\u2019s":[181],"benefits,":[182],"provide":[184],"examples":[185],"cases":[190],"compare":[192],"counterparts.":[197]},"counts_by_year":[{"year":2026,"cited_by_count":2},{"year":2025,"cited_by_count":2},{"year":2024,"cited_by_count":2},{"year":2023,"cited_by_count":1}],"updated_date":"2026-08-26T07:47:46.906454","created_date":"2025-10-10T00:00:00"}