Using machine learning to detect communication channel abnormalities in an ICS/IIoT application

摘要

This disclosure provides a security system and method for using machine learning to improve cybersecurity operations in an industrial control networks and other systems. A method includes collecting, by a security system, current communications channel information for a plurality of devices in a control system. The method includes analyzing, by the security system, the current communications channel information according to one or more device models. The method includes producing, by the security system and according to the analysis, a risk report that identifies an abnormal device among the plurality of devices.