Increasing the cybersecurity of a control subject of a technological system by using a protected operating system

A security system of increasing the cybersecurity of a control subject of an industrial technological system, the security system comprising:

• a hardware processor configured to:
• install a protected Operating System (OS) on a control subject of the industrial technological system, wherein the control subject comprises an upper level control subject configured to obtain and compile information about states of elements of the industrial technological system;
• receive, by the protected OS, a plurality of log files from the control subject;
• analyze, by the protected OS, the plurality of log files to determine if a suspicious action has been applied to the control subject, wherein the suspicious action comprises a deliberate illegitimate external action on a state of an object of control, and wherein the control subject is configured to apply a controlling action to the object of control;
• intercept, by the protected OS, network packets transmitted by an application launched in a guest OS to the control subject;
• and
• prevent, by the protected OS, an interaction between the application and the control subject, in response to determining that the suspicious action has been applied to the control subject.

A non-transitory computer-readable medium, storing instructions thereon for increasing the cybersecurity of a control subject of an industrial technological system, the instructions comprising:

• installing a protected Operating System (OS) on a control subject of the industrial technological system, wherein the control subject comprises an upper level control subject configured to obtain and compile information about states of elements of the industrial technological system;
• receiving, by the protected OS, a plurality of log files from the control subject;
• analyzing, by the protected OS, the plurality of log files to determine if a suspicious action has been applied to the control subject, wherein the suspicious action comprises a deliberate illegitimate external action on a state of an object of control, and wherein the control subject is configured to apply a controlling action to the object of control;
• intercepting, by the protected OS, network packets transmitted by an application launched in a guest OS to the control subject;
• and
• preventing, by the protected OS, an interaction between the application and the control subject, in response to determining that the suspicious action has been applied to the control subject.