Monitoring

Identify anomalies and cyber attacks

PROBLEM

Is the activity on your industrial system healthy?

Inability to identify cyber attacks

Reactive intervention (i.e. if damage is visible)

No control of anomalies

High exposure to damage from cyber attacks or repeated anomalies

SOLUTION

CyPRES

Functions

  • Equipment and data flow real-time mapping with metrics and indicators
  • Functional and temporal representation of the system's behavior
  • Alerts related to protocols, networks, data flow, process values, inconsistent behavior
  • Recordings to replay and use through a SIEM
  • Learning mode to evolve with the system

Technologies

  • Protocol-specific dissectors
  • Behavioral analysis related to functions dynamics
  • Contextualization based on network frames, resources and operating modes
  • Rule engine based on artificial intelligence
  • Configuration combining PLC programs parsing and monitoring tags

Operations

  • HMI includes an operation related section to integrate the operator in the security chain
  • Combination of behavioral analysis and rules engine, multi-layer analysis and context awareness to reduce the number of false alarms

OUR METHODOLOGY

Project to product approach

Implementation

  • Identification of capture points and setup (port mirroring or TAP)
  • HMI set up (control, presentation, investigation)
  • Configuration and tuning with Cybelius

Commitments

  • Passive captures without disturbing the OT network
  • Secure development and regular updates
  • Product includes annual operating and maintenance license

BENEFITS

The visibility needed to report and improve

Monitoring - Benefits

NEXT STEP

Contact us

We firmly believe cybersecurity is a continual improvement process, which requires the proper followup.

We are your partner in this approach, and we provide you with the advice and skills you need to take up this new challenge. We share your problems, objectives and constraints in order to determine together the interest of an active evaluation, security or monitoring of your industrial system.