Friday, August 22, 2014

ICS Network anomalies detection

Deep Protocol Behavior Inspection


This technology  is based in a revolutionary approach to ICS Network monitoring that is able of building, in a shelf-learning way, the Behavioral Network Blueprint (Normal behavior).

The Behavioral Blueprint defines communication patterns, protocols, message types, message fields, and field values which are allowed in your network (i.e. the Network whitelist). Then, whenever a communication that diverges from the Behavioral Blueprint occurs, sensor system reports it, pinpointing the exact source of the problem.

This technology is known as Deep Protocol Behavior Inspection (DPBI).

Lets see some examples in this video: