Anomaly and Vulnerability Detection System (iSID)

• Real passive analysis of industrial network traffic
• Anomaly detection in communication behavior
• Calculation of compliance with IEC 62443

iSID, the Industrial Cybersecurity Awareness platform, monitors OT networks in a distributed, non-intrusive manner to detect potential threats that may affect their proper functioning. It also creates a pattern of communications and anomalous behavior of the equipment.

It has several mechanisms to create the model: visibility of IT and OT devices, protocols, sessions, attack detection, policy monitoring, and validation of operating parameters.

iSID enables non-intrusive monitoring of traffic circulating through a specific ICS OT network to detect changes in its topology or behavior:

• Network visibility: Using passive network scanning techniques, iSID creates a visual model for all devices, protocols, and sessions, generating alerts in case of changes.
• Cybersecurity threats: the monitoring tool detects general and specific threats to ICS OT networks.
• Anomaly detection: iSID creates a network behavior model using multiple parameters to detect changes that may indicate malicious actions.
• Policy monitoring: defines policies for each network link to validate specific commands that may affect the proper functioning of the process.