Honeypot (OT)

An operational-technology honeypot is a decoy system that imitates real shipboard or port control equipment (a PLC, an ECDIS interface, a SCADA server) to attract and observe attackers without exposing production systems. Any interaction with it is by definition suspicious, so it doubles as an early-warning sensor and a source of threat intelligence about who is probing maritime OT and how. Honeypots are a research and detection tool rather than a control mandated by IMO MSC-FAL.1/Circ.3, but they feed the threat-hunting and intrusion-detection layers of a maritime cyber risk management plan.