AnalytICS Engine Enables You to Detect Cyber-Physical and Operational Incidents on Your Legacy ICS to Increase Asset Uptime and Avoid Asset Damage
AnalytICS Engine operates as an intrusion detection system (IDS), enabling you to securely capture, baseline, analyze trends and create alerts on serial communications network behavior. The analytical platform streamlines the security analysis process by gathering encrypted serial data packages sent by SerialGuard sensors and performs thorough deep packet inspections to formulate metrics and visualizations of the assembled data. The platform can be deployed on-premise or as a service, providing you with an easy-to-use set of intuitive tools to monitor communications.
The AnalytICS Engine:
- Flags anomalous communications to detect cyber and operational incidents in your ICS
- Performs deep packet inspection and derives summary metrics for serial communication
- Remotely manages your SerialGuard sensors
- Integrates with SIEMs to support your pre-existing security workflows
CyRenQL™ – The Cynalytica Query Language
The Evolutionary High Performance Integrated Query Programming Tool for IP and non-IP ICS/SCADA in OT Environments
Cynalytica Query Language (CyRenQL):
- Provides users the ability to create cross network alerts, integrations, and other triggers from the AnalytICS Engine
- Delivers NOC/SOC operators and analysts a platform that can simultaneously query and correlate data across analog, serial, and TCP/IP ICS/SCADA communications
- Provides operations centers improved visibility, comprehensive threat detection, faster incident response, enhanced situational awareness, and greater efficiency
- Enables tailored machine learning and AI in by providing a unified platform to access, analyze, and integrate data from disparate sources
The Cynalytica AnalytICS Platform in Action
Detecting Malicious Data and Advanced Attacks
(False Feedback Attacks & Other Malicious Data)
Serial Communications Asset and Configuration Change Management
Troubleshooting and Diagnostics
Nozomi Networks & Cynalytica Solutions Brief
ICS Serial Network Attack Scenarios
Download the SerialGuard AnalytICS Platform
Value Proposition
SerialGuard AnalytICS Platform Enterprise Starter Kit
Enjoy a fast track route to securing your legacy ICS
We understand the challenges of aligning OT security and digital transformation projects – and we are here to help you.
Our Starter Kit offers you a fast track option to kick-start securing your legacy ICS while providing you with the technical support that delivers results today!
What you get with the Enterprise Starter Kit
- 3 SerialGuard Sensors
- 1-year AnalytICS Engine License for up to 5 SerialGuard Sensors
- Implementation Support & Applications Updates
Quotes available for international shipping.
Order Inquiry
Benefits
- Anomaly alerts significantly reduces Mean Time to Detect (MTTD) cybersecurity threats
- Increases detections of malicious activities
- Saves Time – configures and manages SerialGuard devices from a centralized location
- Organizes data into an easy-to-read format for efficient ICS health monitoring
- Gives a deeper insight into serial-based ICS traffic behavior
- Helps ICS security teams make quick, informed decisions
Management Features
Analytics Engine comes with built-in properties that perform device and data management tasks including:
- Remote configuration and management of SerialGuard devices
- Encryption and authentication with role-based access control
- Serial traffic alert monitoring
- Industrial system health monitoring
- Asset and cluster management
- Data historian and audit trails
- Protocol Agnostic Support
- Integration with commercial SIEMs
- Native support for Syslog and JSON
- Data Export to CSV
- Large data storage
Powerful Data Visualization & Analytics Tools
The platform’s powerful suite of data visualization and analytic tools help users understand the serial data sets and identify patterns with ease. Built-in capabilities include:
- Visualization and statistical characterization of key serial traffic parameters, such as:
- Protocol Density
- Protocol Distribution
- Message Size
- Message Count
- Deep Packet Inspection of serial communications
- Rule-based anomaly detection