Deep Protocol Behavior Inspection
This technology is based in a revolutionary approach to
ICS Network monitoring that is able of building, in a shelf-learning way, the Behavioral
Network Blueprint (Normal behavior).
The
Behavioral Blueprint defines communication patterns, protocols, message types,
message fields, and field values which are allowed in your network (i.e. the Network
whitelist). Then, whenever a communication that diverges from the Behavioral
Blueprint occurs, sensor system reports it, pinpointing the exact source of the
problem.
This
technology is known as Deep Protocol Behavior Inspection (DPBI).
Lets see some examples in this video: