Patent Document ID: 20170126745
Application ID: 14932774
Patent Flag: 0

Claim One:
1. A system for providing intrusion detection for industrial control systems, comprising: at least one serial data link to communicate with serial-based networks; at least one Ethernet interface to communicate with industrial and enterprise networks; at least one processor and memory communicatively coupled to the processor, the memory storing instructions executable by the system; a protocol recognition engine executed by the processor and configured to break down an incoming data packet by protocol and integrate the data into an Ethernet framework; an industrial control system recognition application executed by the processor and configured to detect intrusions; a traffic analytics application executed by the processor and configured to analyze traffic activity for abnormal traffic activity; a logfile creation application executed by the processor and configured to poll industrial equipment and create a logfile of equipment statuses; a long term system deviation analysis application executed by the processor and configured to monitor raw data of the industrial equipment to create a profile of long term system activity; a rule set executed by the processor and configured to allow data that matches the rule set and flag data that does not match the rule set; and an alerts engine executed by the processor and configured to alert a system administrator of suspect activity.