Automated, networked productions are dependent on real-time processes. Small disturbances inevitably lead to interruptions, quality problems and unplanned downtimes. Cyber attacks and technical error states endanger the flawless functioning of Industrial Automation and Control Systems (IACS).
The sensor application running on the ctrlX CORE allows a smooth integration into the Rhebo Industrial Protector - which has to be deployed as an appliance, for example centrally at a control center for a complete production line - for monitoring and anomaly detection in IACS.
The monitoring of all communication processes using industrial anomaly detection guarantees the notification of every suspicious process within the IACS. This enables the detection of even concealed attacks and even the smallest error states in real-time and their immediate elimination. In distributed environments, the direct integration of sensors at the different segments into a monitoring center enables cost-efficient deployment and maximum visibility at the same time.
Use case 1
Prevent malfunctions on field bus level - Malicious software, for example, introduced to a system via a USB stick, is detected in the production cell before it can laterally spread to the entire network.
Use case 2
Actively react to anomalies - Rhebo Industrial Protector creates an actual and detailed overview of the systems and equipment communicating in the IACS as well as the protocols and commands used. This allows fast identification of anomalies, malfunctions or redundant processes.
Use case 3
Detect cyberattacks early on - The anomaly detection of Rhebo Industrial Protector also reports events that occur before a cyberattack (reconnaissance phase). This includes address-, port- as well as Profinet discovery scans. With this information it is possible to block exploration activities and prevent lateral movements.
Rhebo Industrial Protector - Notifications
Rhebo Industrial Protector - Devices/Hosts
Support
Related Links
The Company
Rhebo is the only vendor-independent provider of industrial monitoring solutions ensuring both cybersecurity and stability of ICS and IoT infrastructures. The German company’s solutions monitor all communication within the ICS and on distributed critical IoT devices. Any attacks, vulnerabilities as well as technical error states are reported in real-time. Thus, Rhebo vendor-neutrally supports industrial, energy and water companies to increase cybersecurity, productivity and availability of their systems and plants to safeguard their digital transformation. In this role, the company is partner of the Alliance for Cyber Security of the Federal Office for Information Security (BSI), is actively developing standards and technical guidance in the Teletrust - Bundesverband IT-Sicherheit e.V. and the Bitkom Security Management Working Group. www.rhebo.com
