Continuous Monitoring

In the previous chapter, we started to understand the core features of MDIoT. Now, let us delve deeper into another of its features: continuous monitoring.

OT network sensors monitor the network traffic continuously across an organization’s assets (for IoT and OT devices). This monitoring is done through the SPAN port or network TAP. This continuous monitoring is important in the field of cybersecurity, as it immediately picks up on any changes in the environment and reports anomalous behavior.

Continuous monitoring helps with the detection of policy violations, protocol violations, industrial malware, anomalies, and operational incidents. It helps in responding to the alerts generated by the system.

In this chapter, we will cover the following topics:

• The protocol violation detection engine
• The policy violation detection engine
• The industrial malware detection engine
• The anomaly detection engine
• The operational engine
...