Industrial system event detection and corresponding response

A system for providing industrial system cybersecurity event detection and corresponding response, comprising:

• a local or virtual processor;
• and
• a storage device communicatively coupled to the local or virtual processor and storing computer-readable instructions for a cybersecurity process thereon that, when executed by the processor, cause the system to:
• receive sensor outputs from one or more industrial sensors in the industrial system, the industrial sensors being used to monitor and control an industrial process in the industrial system;
• derive sensor data from the sensor outputs, the sensor data reflecting one or more industrial processing aspects of the industrial process;
• process the sensor data using one or more pattern recognition algorithms, the one or more pattern recognition algorithms trained to recognize potentially suspicious/malicious patterns that indicate a potential cyberattack on the industrial system;
• determine whether the one or more pattern recognition algorithms recognize the sensor data as a potentially suspicious/malicious pattern;
• and
• execute a malicious pattern response process in response to the sensor data being recognized as a potentially suspicious/malicious pattern.

A non-transitory computer-readable medium storing computer-readable instruction for a cybersecurity process thereon that, when executed by a processor, causes the processor to:

• receive sensor outputs from one or more industrial sensors in the industrial system, the industrial sensors being used to monitor and control an industrial process in the industrial system;
• derive sensor data from the sensor outputs, the sensor data reflecting one or more industrial processing aspects of the industrial process;
• process the sensor data using one or more pattern recognition algorithms, the one or more pattern recognition algorithms trained to recognize potentially suspicious/malicious patterns that indicate a potential cyberattack on the industrial system;
• determine whether the one or more pattern recognition algorithms recognize the sensor data as a potentially suspicious/malicious pattern;
• and
• execute a malicious pattern response process in response to the sensor data being recognized as a potentially suspicious/malicious pattern.