Description:
Operational technology or SCADA monitors and manages industrial process assets and critical infrastructure such as railway transport, oil and gas pipelines, power grids, critical facilities, and airports.
Our main product, OTShield, is an Intrusion Detection and Prevention System that protects SCADA and process automation systems against cyber attacks and operational threats. OTShield has the ability to protect critical infrastructure both known and unknown threats and also operational threats and external cyber-attacks. Asset management, deep packet analysis of SCADA communication protocols, data analytics, detection and blocking of suspicious activities are main features of OTShield. Extensive agent logging system and deep authorization on SCADA communication protocols (up to read and write control) allows us to control hardware/sensor health. Our proposed solution also offers the ability to perform attack analysis by directing attacks against a SCADA system utilizing honeypot technology which deceives attacker to interpret aggressive profile without the actual system is being damaged.
OTShield, traffic between IT and OT is kept under control, it provides protection against operational threats that may occur in OT network and SCADA honeypot integration enables attack analysis without damaging the real OT network in case of possible attack. OTShield has the ability to detect complex attacks that are unknown and not found in open source threat intelligence, thanks to the artificial intelligence algorithms we have developed through future selection studies specific to SCADA systems. We use elasticsearch based log correlation system for big data management. We are developing the kernel level platform-independent Packet Capture module for deep packet inspection in SCADA communication protocols.