{"id":"https://openalex.org/W4410152187","doi":"https://doi.org/10.1145/3716550.3722032","title":"PLCpot: Application Dialogue Replay based Scalable PLC Honeypot for Industrial Control Systems","display_name":"PLCpot: Application Dialogue Replay based Scalable PLC Honeypot for Industrial Control Systems","publication_year":2025,"publication_date":"2025-05-06","ids":{"openalex":"https://openalex.org/W4410152187","doi":"https://doi.org/10.1145/3716550.3722032"},"language":"en","primary_location":{"id":"doi:10.1145/3716550.3722032","is_oa":true,"landing_page_url":"https://doi.org/10.1145/3716550.3722032","pdf_url":"https://dl.acm.org/doi/pdf/10.1145/3716550.3722032","source":null,"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Proceedings of the ACM/IEEE 16th International Conference on Cyber-Physical Systems (with CPS-IoT Week 2025)","raw_type":"proceedings-article"},"type":"conference-paper","indexed_in":["crossref"],"open_access":{"is_oa":true,"oa_status":"gold","oa_url":"https://dl.acm.org/doi/pdf/10.1145/3716550.3722032","any_repository_has_fulltext":null},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5052117709","display_name":"Syed Ali Qasim","orcid":"https://orcid.org/0000-0001-5333-9153"},"institutions":[{"id":"https://openalex.org/I8606887","display_name":"Grand Valley State University","ror":"https://ror.org/001m1hv61","country_code":"US","type":"education","lineage":["https://openalex.org/I8606887"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Syed Ali Qasim","raw_affiliation_strings":["Grand Valley State University, Allendale, Michigan, USA"],"raw_orcid":"https://orcid.org/0000-0001-5333-9153","affiliations":[{"raw_affiliation_string":"Grand Valley State University, Allendale, Michigan, USA","institution_ids":["https://openalex.org/I8606887"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5081100099","display_name":"Muhammad Taqi Raza","orcid":"https://orcid.org/0000-0003-1245-1151"},"institutions":[{"id":"https://openalex.org/I24603500","display_name":"University of Massachusetts Amherst","ror":"https://ror.org/0072zz521","country_code":"US","type":"education","lineage":["https://openalex.org/I24603500"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Taqi Raza","raw_affiliation_strings":["University of Massachusetts Amherst, Amherst, Massachusetts, USA"],"raw_orcid":"https://orcid.org/0000-0003-1245-1151","affiliations":[{"raw_affiliation_string":"University of Massachusetts Amherst, Amherst, Massachusetts, USA","institution_ids":["https://openalex.org/I24603500"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5063509441","display_name":"Irfan Ahmed","orcid":"https://orcid.org/0000-0001-5648-388X"},"institutions":[{"id":"https://openalex.org/I184840846","display_name":"Virginia Commonwealth University","ror":"https://ror.org/02nkdxk79","country_code":"US","type":"education","lineage":["https://openalex.org/I184840846"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Irfan Ahmed","raw_affiliation_strings":["Virginia Commonwealth University, Richmond, Virginia, USA"],"raw_orcid":"https://orcid.org/0000-0001-5648-388X","affiliations":[{"raw_affiliation_string":"Virginia Commonwealth University, Richmond, Virginia, USA","institution_ids":["https://openalex.org/I184840846"]}]}],"institutions":[],"countries_distinct_count":1,"institutions_distinct_count":3,"corresponding_author_ids":[],"corresponding_institution_ids":[],"apc_list":null,"apc_paid":null,"fwci":3.3874,"has_fulltext":true,"cited_by_count":1,"citation_normalized_percentile":{"value":0.86193796,"is_in_top_1_percent":false,"is_in_top_10_percent":false},"cited_by_percentile_year":{"min":91,"max":95},"biblio":{"volume":null,"issue":null,"first_page":"1","last_page":"11"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T10917","display_name":"Smart Grid Security and Resilience","score":0.9980000257492065,"subfield":{"id":"https://openalex.org/subfields/2207","display_name":"Control and Systems Engineering"},"field":{"id":"https://openalex.org/fields/22","display_name":"Engineering"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T10917","display_name":"Smart Grid Security and Resilience","score":0.9980000257492065,"subfield":{"id":"https://openalex.org/subfields/2207","display_name":"Control and Systems Engineering"},"field":{"id":"https://openalex.org/fields/22","display_name":"Engineering"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T12216","display_name":"Network Time Synchronization Technologies","score":0.9975000023841858,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T13344","display_name":"Industrial Automation and Control Systems","score":0.9957000017166138,"subfield":{"id":"https://openalex.org/subfields/2207","display_name":"Control and Systems Engineering"},"field":{"id":"https://openalex.org/fields/22","display_name":"Engineering"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/honeypot","display_name":"Honeypot","score":0.9292572736740112},{"id":"https://openalex.org/keywords/scalability","display_name":"Scalability","score":0.7594144940376282},{"id":"https://openalex.org/keywords/computer-science","display_name":"Computer science","score":0.7384276390075684},{"id":"https://openalex.org/keywords/industrial-control-system","display_name":"Industrial control system","score":0.5259333252906799},{"id":"https://openalex.org/keywords/control","display_name":"Control (management)","score":0.5038496851921082},{"id":"https://openalex.org/keywords/operating-system","display_name":"Operating system","score":0.2797085642814636},{"id":"https://openalex.org/keywords/computer-security","display_name":"Computer security","score":0.22628003358840942},{"id":"https://openalex.org/keywords/artificial-intelligence","display_name":"Artificial intelligence","score":0.10501089692115784}],"concepts":[{"id":"https://openalex.org/C191267431","wikidata":"https://www.wikidata.org/wiki/Q911932","display_name":"Honeypot","level":2,"score":0.9292572736740112},{"id":"https://openalex.org/C48044578","wikidata":"https://www.wikidata.org/wiki/Q727490","display_name":"Scalability","level":2,"score":0.7594144940376282},{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.7384276390075684},{"id":"https://openalex.org/C40071531","wikidata":"https://www.wikidata.org/wiki/Q2513962","display_name":"Industrial control system","level":3,"score":0.5259333252906799},{"id":"https://openalex.org/C2775924081","wikidata":"https://www.wikidata.org/wiki/Q55608371","display_name":"Control (management)","level":2,"score":0.5038496851921082},{"id":"https://openalex.org/C111919701","wikidata":"https://www.wikidata.org/wiki/Q9135","display_name":"Operating system","level":1,"score":0.2797085642814636},{"id":"https://openalex.org/C38652104","wikidata":"https://www.wikidata.org/wiki/Q3510521","display_name":"Computer security","level":1,"score":0.22628003358840942},{"id":"https://openalex.org/C154945302","wikidata":"https://www.wikidata.org/wiki/Q11660","display_name":"Artificial intelligence","level":1,"score":0.10501089692115784}],"mesh":[],"locations_count":1,"locations":[{"id":"doi:10.1145/3716550.3722032","is_oa":true,"landing_page_url":"https://doi.org/10.1145/3716550.3722032","pdf_url":"https://dl.acm.org/doi/pdf/10.1145/3716550.3722032","source":null,"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Proceedings of the ACM/IEEE 16th International Conference on Cyber-Physical Systems (with CPS-IoT Week 2025)","raw_type":"proceedings-article"}],"best_oa_location":{"id":"doi:10.1145/3716550.3722032","is_oa":true,"landing_page_url":"https://doi.org/10.1145/3716550.3722032","pdf_url":"https://dl.acm.org/doi/pdf/10.1145/3716550.3722032","source":null,"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Proceedings of the ACM/IEEE 16th International Conference on Cyber-Physical Systems (with CPS-IoT Week 2025)","raw_type":"proceedings-article"},"sustainable_development_goals":[{"score":0.4099999964237213,"id":"https://metadata.un.org/sdg/9","display_name":"Industry, innovation and infrastructure"}],"awards":[{"id":"https://openalex.org/G5081001426","display_name":"SaTC: CORE: Small: Automatic Exploits Detection and Mitigation for Industrial Control System Protocols","funder_award_id":"2345563","funder_id":"https://openalex.org/F4320306076","funder_display_name":"National Science Foundation"},{"id":"https://openalex.org/G5217095113","display_name":"OAC Core: MedKnights - Towards Secure and Flexible Medical IoT (IoMT) Infrastructure using Generative Adversarial Networks","funder_award_id":"2212424","funder_id":"https://openalex.org/F4320306076","funder_display_name":"National Science Foundation"},{"id":"https://openalex.org/G5889512089","display_name":null,"funder_award_id":"2212424, 2345563","funder_id":"https://openalex.org/F4320323817","funder_display_name":"Universitas Brawijaya"}],"funders":[{"id":"https://openalex.org/F4320306076","display_name":"National Science Foundation","ror":"https://ror.org/021nxhr62"},{"id":"https://openalex.org/F4320323817","display_name":"Universitas Brawijaya","ror":"https://ror.org/01wk3d929"}],"has_content":{"grobid_xml":true,"pdf":true},"content_urls":{"pdf":"https://content.openalex.org/works/W4410152187.pdf","grobid_xml":"https://content.openalex.org/works/W4410152187.grobid-xml"},"referenced_works_count":22,"referenced_works":["https://openalex.org/W313385724","https://openalex.org/W2002578057","https://openalex.org/W2039427951","https://openalex.org/W2552542906","https://openalex.org/W2791587036","https://openalex.org/W2937619061","https://openalex.org/W2945937333","https://openalex.org/W2952754944","https://openalex.org/W2971297766","https://openalex.org/W3036981874","https://openalex.org/W3108707471","https://openalex.org/W3158020972","https://openalex.org/W3177650213","https://openalex.org/W3188748135","https://openalex.org/W4206484832","https://openalex.org/W4291701060","https://openalex.org/W4319866282","https://openalex.org/W4377710638","https://openalex.org/W4378191980","https://openalex.org/W4383498518","https://openalex.org/W4399381491","https://openalex.org/W6889617787"],"related_works":["https://openalex.org/W4391375266","https://openalex.org/W2899084033","https://openalex.org/W2748952813","https://openalex.org/W2789663798","https://openalex.org/W2375896275","https://openalex.org/W4389485405","https://openalex.org/W1967903162","https://openalex.org/W2990025694","https://openalex.org/W4200331022","https://openalex.org/W4285327734"],"abstract_inverted_index":{"Programmable":[0],"Logic":[1],"Controllers":[2],"(PLCs)":[3],"are":[4],"essential":[5],"components":[6],"of":[7],"industrial":[8],"control":[9,100],"systems":[10],"(ICS),":[11],"overseeing":[12],"critical":[13],"processes":[14],"like":[15],"manufacturing":[16],"and":[17,38,64,76,84,89,105],"power":[18],"generation.":[19],"As":[20],"cyberattacks":[21],"grow":[22],"in":[23,51],"sophistication,":[24],"the":[25],"security":[26],"community":[27],"uses":[28],"PLC":[29,41,66,72],"honeypots":[30],"to":[31,70,92,108],"gather":[32],"threat":[33],"intelligence":[34],"on":[35],"attackers'":[36],"tools":[37],"strategies.":[39],"Existing":[40],"honeypots,":[42],"whether":[43],"low":[44],"or":[45,54],"high":[46],"interaction,":[47],"often":[48],"face":[49],"challenges":[50],"maintaining":[52],"realism":[53],"supporting":[55],"complex":[56],"interactions.":[57],"This":[58],"paper":[59],"presents":[60],"PLCpot,":[61],"a":[62],"protocol-agnostic":[63],"scalable":[65],"honeypot":[67],"framework":[68],"designed":[69],"emulate":[71],"communication":[73],"by":[74],"analyzing":[75],"replaying":[77],"network":[78],"traffic.":[79],"By":[80],"identifying":[81],"dynamic":[82],"fields":[83],"function":[85],"codes":[86],"within":[87],"protocols":[88],"mapping":[90],"them":[91],"application-level":[93],"operations,":[94],"PLCpot":[95],"supports":[96],"features":[97],"such":[98],"as":[99],"logic":[101],"transfer,":[102],"basic":[103],"authentication,":[104],"operational":[106],"modes":[107],"enhance":[109],"attacker":[110],"engagement.":[111]},"counts_by_year":[{"year":2025,"cited_by_count":1}],"updated_date":"2026-07-29T14:22:42.915294","created_date":"2025-10-10T00:00:00"}
