Threat detection system for industrial controllers
AssigneeSi-Ga Data Security (2014) Ltd.
InventorsIlan Gendelman, Amir Samoiloff
Life of this patent
Estimating the term…
Abstract
A threat detection system for industrial controllers, comprising: at least one Programmable Logic Controller (PLC); at least one physical device connected with the PLC; a Deterministic Fictitious Programmable Logic Controller (DFPLC) deterministically programmed to respond with at least one predetermined signal to at least one input signal received; and a monitoring unit connected with the DFPLC; the DFPLC disguised as a PLC; and the monitoring unit configured to send at least one input signal to the DFPLC, receive at least one response from the DFPLC and communicate at least one alert upon the at least one response being other than an expected response according to the deterministic programming of the DFPLC.
Claims3
A threat detection system for industrial controllers, comprising:
- at least one Programmable Logic Controller (PLC);
- at least one physical device connected with said PLC;
- a Deterministic Fictitious Programmable Logic Controller (DFPLC) comprising a deterministic program logic;
- said DFPLC deterministically programmed and configured to receive at least one input signal and respond with at least one predetermined signal according to said logic;
- and
- a monitoring unit connected with said DFPLC;
- said DFPLC disguised as a PLC;
- and
- said monitoring unit configured to send at least one input signal to said DFPLC, receive at least one response from said DFPLC and communicate at least one alert upon said at least one response being other than an expected response according to said deterministic programming of said DFPLC.
A method of detecting threats in industrial systems, comprising:
- sending, by a monitoring unit, at least one input signal to a Deterministic Fictitious Programmable Logic Controller (DFPLC) comprising a deterministic program logic;
- said DFPLC deterministically programmed and configured to receive at least one input signal and respond with at least one predetermined signal according to said logic;
- said DFPLC disguised as a PLC;
- receiving, by said monitoring unit at least one response from said DFPLC;
- and
- providing, by said monitoring unit, at least one alert upon said at least one response being other than an expected response according to said deterministic programming of said DFPLC.
Dependencies are inferred from the claim text.