Conpot

Conpot is a low interaction server side Industrial Control Systems honeypot designed to be easy to deploy, modify and extend. By providing a range of common industrial control protocols, we created the building blocks that enables network defenders to build their own industrial deception infrastructure, which potentially can give the blue team valuable time to react before the attacker reaches the real control systems. Since we provide some of the protocols as complete stacks, Conpot can be accessed with productive HMI's and even extended with real hardware. In this presentation we will give insights into our deployment strategies, the data we collect and what happens when you build your own industrial system. See more at http://conpot.org