1. Industrial Control System Network Architecture Analysis

2. Who am I? NIATEC Class of 2015 Associate CISSP 2015
Capabilities Developer Department of the Army 782nd
Industrial Control Systems Analyst Idaho National Laboratory

3. Recommended Secure Network Architecture

4. Input (Network Traffic)
ZEEK
Artist formerly known as bro
“a stand-alone system for detecting network intruders in real-time by passively monitoring a network link over which the intruder's traffic transits”
FOSS network analyzer
Live interface or static capture file
Input (Network Traffic)
Process (Bro)
Output (log files)

5. Output
Conn.log

6. Output
Conn.log

7. Initial Analysis

8. Recommended Secure Network Architecture
CIDR
CIDR
CIDR
CIDR

9. //TODO GUI JSON support Dashboards(charts, etc.) Plugin extensibility
You name the file and the fields desired, and the tool builds the table