OSMC 2023 | IGNITE: Honeypot Flavors: Open-Source Honeypots and their Use in the Automotive Industry by Nicolas Ilg

IGNITE
Honeypot Flavors: Open-Source Honeypots and their
Use in the Automotive Industry
Niclas Ilg, PhD Student @ Corporate Research – Bosch GmbH
Open Source Monitoring Conference – 08.11.2023

Niclas Ilg – Open Source Monitoring Conference – 08.11.2023
© Robert Bosch GmbH 2023. Alle Rechte vorbehalten, auch bzgl. jeder Verfügung, Verwertung, Reproduktion, Bearbeitung, Weitergabe sowie für den Fall von Schutzrechtsanmeldungen.
A Software-Defined Vehicle
2
The future’s vehicle
Image source: Bosch Media Service

3
What could go wrong?
Image source: Bing AI Image Generator
What could possibly go wrong?

4
Vulnerabilities on the rise
Image source: Upstream Global Automotive Cybersecurity Report 2023

Automotive Security
5
State of black-hat activities

Automotive Security
6
Black-hats will evolve
Computing resources and domain accessibility
are increasing.
Monetary gains are already massive for
targeting the automotive domain. Attackers will
not spare vehicle computers.

Looking at Other Galaxies
7
Who is responsible?
o Who is liable for large-scale
cyberattacks onto PC systems?
o The device vendor, the OS vendor,
or the user?
o Large companies may be insured,
but what about private customers?

Looking at Other Galaxies
Infected devices
8
What to do with an infected device?

Back to Automotive
9
My brand-new vehicle
Source: https://www.lamborghini.com/de-en/modelle
€€€€€

Back to Automotive
10
Infected vehicle
Source: https://www.autobild.de/artikel/lamborghini-urus-2018-5361872.html
What are the options now?
How do we prevent that
from happening?

Honeypots
Early threat detection
o Honeypots are decoy resources that mimic
valuable systems.
o Adversarial activities on the honeypot are
logged and analyzed by defenders.
o Subsequently, security measures are
updated.
o Typically mimicked systems:
o Web server, SSH server
o IoT devices
o Vulnerabilities (e.g., Log4Shell)
11

Automotive Environment
12
How do we build a honeypot for that?
… and we did not include network
services. Some of them are proprietary.

Honeypots
13
Concepts
Source: Ilg et al. “A survey of contemporary open-source honeypots, frameworks, and tools”
Low-interaction HP Medium-interaction HP High-interaction HP

Honeypots
How to build an automotive honeypot
o Today:
− Low int honeypots configurable for many
operating systems and services
− Deployable on the Internet
o Many different OSs and services.
o Tomorrow:
− Joint open-source honeypot Platform
− Multiple “layers”: Public Internet, private Fleet
networks, V2X networks
o Consolidation of OSs expected.
14

Motivation for the automotive sector
Open-Source
Competition
Enlarged attack
surface
Quality and
coverage
Acceleration needed to stay
relevant against eastern
competitors.
Connectivity, software, AI, and
time-to-market pressure are
intensifying the battle against
adversaries.
Joint development improves
not only quality but also
coverage in a domain with
many stakeholders.
15

Open-Source Honeypots
16
Landscape
Configurable
Specific
Service System
Scans/Bots Attack path/Human
Trapping Intelligence
Vulnerability

17
Growing pains
Honeypots are knowingly exposed
to adversaries. Hence, growing
pains are unavoidable.

18
A success story
Two of the biggest open-source honeypot
projects are maintained by industrial
stakeholders.

How are enterprise IT and (I)IoT honeypots
suddenly interesting for automotive use?
How can we give something back to the
open-source community?
Contribute research on honeypot …
19
Joint development
features deception capabilities data analysis
Technology transfer Urgency

OSMC 2023 | IGNITE: Honeypot Flavors: Open-Source Honeypots and their Use in the Automotive Industry by Nicolas Ilg

Empfohlen

Empfohlen

Weitere ähnliche Inhalte

Ähnlich wie OSMC 2023 | IGNITE: Honeypot Flavors: Open-Source Honeypots and their Use in the Automotive Industry by Nicolas Ilg

Ähnlich wie OSMC 2023 | IGNITE: Honeypot Flavors: Open-Source Honeypots and their Use in the Automotive Industry by Nicolas Ilg (20)

OSMC 2023 | IGNITE: Honeypot Flavors: Open-Source Honeypots and their Use in the Automotive Industry by Nicolas Ilg