S4x18 ICS Detection Challenge Analysis

Feb 27, 2018

The ICS Detection Challenge at S4x18 last January pitted Claroty, Gravwell, Nozomi and Security Matters in a competition to determine who could create the most complete asset inventory and who could do the best job detecting attacks through passive ICS network monitoring only. 

This podcast discusses

• Where the packets came from and what type of ICS created the packet samples
• An analysis of the product categories ability to create an asset inventory
• The effectiveness of the detection capabilities
• Where this product category is likely to go in the next 1 to 5 years. (in the last 15 minutes)

Claroty won the event, but the results really showed what the product category could and could not do.