Deployment environment

OT, ICS and critical infrastructure

Lures for industrial networks where process safety and lab isolation are central conditions.

Research question

How is it tested without affecting the industrial process or claiming unmeasured effectiveness?

Context and method

Definitions and technical considerations should be checked against the primary source. Atlas records are a selection tagged with this topic; a matching tag does not demonstrate operational outcomes.

Cross-reference

This topic across source types

These counts describe tagged Atlas records, not the worldwide number of studies or offerings.

Linked library

Associated records

42 tagged records
Paper2026

A Deception Readiness Index for ICS and OT Cybersecurity Programs

Material reviewed: Abstract

The paper proposes a Deception Readiness Index (DRI) for ICS and OT cybersecurity programs. Using design science and qualitative analysis of public standards and guidance, it scores readiness across governance, architecture, monitoring, workforce, and operational safety domains, and applies the index to three synthetic critical-infrastructure profiles to identify gaps before deployment.

OT/ICSDecoy
Paper2026

Co-ADAM: a co-evolutionary signaling game framework for equilibrium cyber deception in industrial IoT

Material reviewed: Abstract

The paper introduces Co-ADAM, a defense framework that formalizes cyber deception in the Industrial Internet of Things (IIoT) as a constrained Markov decision process with an embedded signaling game, aiming to jointly model the deception investment level and a co-evolutionary adversary that accumulates skepticism. The authors describe training a deep Q-network (DQN) defender against an adaptive attacker pool with budget constraints and skepticism dynamics embedded in the environment, and report evaluation on several IIoT datasets and a physical testbed.

IoTOT/ICSHoneypotDecoy
Dataset or lab2026

DICOMHawk Medical Imaging Deception Dataset

Material reviewed: Public pageCritical reading

Zenodo record of DICOM/PACS telemetry from medical-imaging honeypot research; it documents periods of data loss.

ApplicationOT/ICSHoneypot
Paper2026

HIVE-OT: Design, Implementation, and Reproducible Evaluation of a Process-Coupled Industrial Honeypot

Material reviewed: Abstract

The authors present HIVE-OT's design and implementation and evaluate the evidence supported by its process-coupled research core and historical exports, distinguishing the documented platform from a local implementation linking Modbus, a revised Rust water-treatment surrogate and SQLite. The study tests protocol behavior, command application and retained outcome representations, and audits two deployment exports containing 273978 and 842638 events.

OT/ICSNetworkHoneypot
Paper2026

HoneyPrompt: Multi-Sensor Fusion for Detection and Classification of Autonomous AI Agents in Maritime Industrial Control Systems

Material reviewed: Abstract

The work presents HoneyPrompt, a multi-sensor fusion architecture for detecting and classifying autonomous AI agents that interact with industrial control systems. The authors deploy a maritime SCADA honeypot simulating a pipeline monitoring gateway across six protocols and instrument it with a graduated prompt injection acting as a sensor array.

OT/ICSNetworkHoneypotHoneytoken
Paper2026

ICSLure: A Very High Interaction Honeynet for PLC-based Industrial Control Systems

Material reviewed: Abstract

The authors introduce ICSLure, a modular honeynet framework intended to emulate realistic industrial control system environments. It integrates physical PLCs with live data sources over industrial protocols and virtualized network components, with monitoring to log attacker interactions.

OT/ICSNetworkHoneypotAdversary engagement