ANALYSIS OF EVENT BASED BEHAVIOUR OF END-POINTS IN AN INDUSTRIAL SYSTEM

摘要

There is provided mechanisms for analyzing event based behavior of end-points of a network in an industrial system. A method is performed by a control node. The method comprises collecting(S102), from the end-points, timestamped event log entries as created by the end-points within a time window. Each respective timestamped event log entry pertains to a respective event performed by one of the end-points. The method comprises identifying (S106) tuples of correlated events by comparing the timestamped event log entries to each other, thereby providing a mapping between the events and those end-points where the events of each tuple of correlated events are performed.