《BH_US13-Trend-The-SCADA-That-Didnt-Cry-Wolf-Whos-Really-Attacking-Your-ICS-Devices-Slides》.pdf

A Trend Micro Research Paper The SCADA That Didn’t Cry Wolf Who’s Really Attacking Your ICS Equipment? (Part 2) Kyle Wilhoit (Trend Micro Forward-Looking Threat Research Team) Trend Micro | The SCADA That Didn’t Cry Wolf Contents Introduction 3 Original Honeypot Deployment5 New Honeypot Architecture 6 New Honeypot Deployment8 Attribution Framework 10 Attacks 11 Targeted Attacks 16 Attack Statistics and Motivations 20 Conclusion 21 Appendix 23 TREND MICRO LEGAL DISCLAIMER The information provided herein is for general information and educational purposes only. It is not intended and should not be construed to constitute legal advice. The information contained herein may not be applicable to all situations and may not reflect the most current situation. Nothing contained herein should be relied on or acted upon without the benefit of legal advice based on the particular facts and circumstances presented and nothing herein should be construed otherwise. Trend Micro reserves the right to modify the contents of this document at any time without prior notice. Translations of any material into other languages are intended solely as a convenience. Translation accuracy is not guaranteed nor implied. If any questions arise related to the accuracy of a translation, please refer to the original language official version of the document. Any discrepancies or differences created in the translation are not binding and have no legal effect for compliance or enforcement purposes. Although Trend