Process installation network intrusion detection and prevention

A method of providing process communication protection, the method comprising;

• obtaining at least one process communication packet in accordance with a process communication protocol;
• applying at least one rule against the process communication packet, wherein the at least one rule is based on the process communication protocol;
• and
• determining an event based on whether the at least one process communication packet passed each of the at least one rule.

A process communication device comprising:

• a process communication interface for communicating on a process communication loop in accordance with a process communication protocol;
• a controller coupled to the process communication interface;
• a device description store coupled to the controller, the device description store having at least one process communication packet rule that is based on a device description;
• and
• wherein the controller applies the at least one process communication packet rule to at least one process communication packet received from the process communication interface, and generates event information when a process communication packet fails at least one process communication packet rule.

A method of providing process communication protection, the method comprising;

• obtaining at least one process communication packet in accordance with a process communication protocol;
• applying at least one rule against the process communication packet, wherein the at least one rule is based a device description stored in a process communication security device;
• and
• determining an event based on whether the at least one process communication packet passed each of the at least one rule.