Attack Surface Management: Using Continuous Monitoring for OT and CPS Network Threat Detection

Continuously monitoring Federal OT and CPS assets and networks is a critical need. Doing so, as part of Federal attack surface management, means detecting threats swiftly while reducing operational impact. Not all threats to these specialized networks are created equal and effective attack surface management for them means:

• understanding the differences between OT/CPS and IT networks,

• recognizing and being able to act upon OT/CPS security-related threats as well as process control anomalies, and

• applying compensating controls and other mitigations that consider operational sensitivities and reduced downtime.

Establishing accurate and ongoing asset visibility and exposure management are the first two steps in securing OT and CPS networks. Having done so with The Claroty Platform, Federal organizations then have the right foundation to enact continuous monitoring for swift and effective threat detection.

The Claroty Platform was designed to provide early identification of OT and CPS threats with the company’s in-depth knowledge of OT- and broader CPS-specific protocols, configurations and communications. The Platform identifies all threats to these specialized networks - known threat attacks, zero day attacks, and attacks involving sophisticated OT payloads early in the killchain, as well as process integrity issues that can also be a threat to operations.