Abstract
A creation of packages of metadata, data, and communication networks services that are designed to highly accurately mimic the behavior of specific models of control system devices such as relays, PLCs, RTUs, etc. The inventive nature is the packaging of these features together such that they mimic specific models of equipment where existing approaches focus on generalized control devices. To enable this, some new decoy services and modifications to existing decoy services where necessary to further the granularity at which they decoy responses match the real device they are mimicing. This includes things like the creation of decoy services like telnet with metadata to drive realistic options and responses and detailed profiles of SCADA/process control application support to create accurate responses to application requests. These high fidelity features are being packaged together utilizing the Attivo Decoy Campaign feature which allows defining sets of services together and configuration of those services.
Exploratory License
Not eligible for exploratory license
Market Sector
Security
Energy Infrastructure