Reproduce “Stinging the Swarm: Extracting Attacker Intelligence from a Twin-Controller OT Honeypot” on OpenResearch

Turn your favorite coding agents into research agents that review literature, develop hypotheses, and run experiments.

Universal app for Apple silicon and Intel. Requires macOS 11 or later.

About this paper

Canyon Grey Dell'Omo, Joao Pedro de Carvalho Voltani

Talos is an inline defense that blocks damaging writes to industrial controllers and reroutes flagged agents to a permissive mirror that records their activity. Across 2,400 simulated agents, no writes reached the real controller; among 600 anti-disclosure agents, 231 submitted information through the mirror-and-lure channel. The results cover one attacker model and one synthetic device family.

Summary by alphaXiv.

Tip: change arxiv.org to autoarxiv.org in any arXiv abstract link to open the paper here.