Industrial Defender NIDS

Network sensor appliance for detecting attacks, rogue systems and unauthorized traffic within your network perimeter.

Industrial Defender provides a variety of sensors to monitor network traffic and equipment. First a Network Intrusion Detection Sensor (NIDS) passively monitors the control network without interfering with normal traffic flow. The NIDS can recognize a wide variety of attack patterns, log suspicious activity and send alerts to the security management console. Industrial Defender has extended the traditional NIDS signatures to include control system specific functions. For example detecting use of default vendor equipment passwords, detecting PLC software uploads and dealing with control specific protocols such as Modbus, DNP3 and IEC 61850.

The Network Sensor also detects the addition of new computers to the network - for example a contractor plugging in a laptop or a new connection to a wireless access point. Since control networks tend to be quite stable this sensor makes it easy to detect rogue devices being connected.