Model-driven Deception for Control System Environments

Deception techniques are a useful defensive mechanism that could be very valuable in control systems where updates and patches can be difficult. However, to deceive a motivated and targeted attacker it is necessary to enhance deception platforms with capabilities to model and simulate physical processes to achieve necessary fidelity. In this paper, attributes of cyber-physical decoys are discussed and a design of a system with these attributes is presented. A boiler model use case is provided to demonstrate how this novel deception capability can be integrated into and used to defend a system.