Approaches to find vulnerabilities and security in the digital production networks

Abstract

Currently, the problem of ensuring cybersecurity of the network and information infrastructure of critical facilities is relevant. A special place in this is security automated control systems, which are the basis of industry 4.0. At the same time, the main source of threats to such systems is the external network of the telecommunications service provider, through which the operation of remote objects and systems is monitored. In the framework of this study, an approach was developed to search for abnormal behavior in the networks of telecommunication service providers, based on an analysis of events in the logs of various systems, including those responsible for network security. The proposed approach is the development of an information and event management system.