Legacy techniques like isolation or basic passwords don’t keep SCADA and ICS networks secure anymore. As SCADA networks become increasingly interconnected, they are at risk from attacks. This means a serious risk of catastrophic events like loss of critical infrastructure.
Many existing IT tools don’t work with these industrial systems, and existing SCADA security tools are not designed to solve the problem of interconnection with IT networks.
Attacks are more and more common in SCADA networks. MENDEL applies the same passive threat detection available for IT networks to SCADA environments. This means it detects anomalous events, including advanced attacks, as well as hundreds of known threats, without the risk of automatically suspending critical infrastructure to respond to an attack.
The ability to know what is connected to the network is just as important in SCADA networks as it is
in IT networks. MENDEL identifies all IP-connected devices in the network, including their communications within the network, and even their states – like “time” or speed. This means
you can identify misconfigurations, or even if a technician connects to the network for maintenance,
or if a turbine is moving faster or slower than it should be.
Connected networks mean IT and SCADA [security analysts] [network administrators] must work together, often in unfamiliar devices, environments, and communications. MENDEL allows teams
to monitor and visualize both IT and SCADA networks from a single interface, while combining
the advanced detection that IT security teams want, with the passive approach that SCADA network administrators demand.
