Login

Proceedings of the Automation & IT Seminar

ISSN 2594-5335

26º Seminário de Automação e TI — vol. 26, num.26 (2024)

Title

ESTABLISHING AN INTEGRATED IT/OT SOC SUPPORTED BY AN AI-POWERED NDR SOLUTION

ESTABLISHING AN INTEGRATED IT/OT SOC SUPPORTED BY AN AI-POWERED NDR SOLUTION

Authorship

BAIÔCO, GLEISON; PERDIGÃO, ANA PAULA; PEREIRA, FELIPE CARVALHO

BAIÔCO, GLEISON
BAIÔCO, GLEISON

I am this author

PERDIGÃO, ANA PAULA
PERDIGÃO, ANA PAULA

I am this author

PEREIRA, FELIPE CARVALHO
PEREIRA, FELIPE CARVALHO

I am this author

DOI

10.5151/2594-5335-41563

Downloads

5 Downloads

Abstract

CYBER THREATS ARE GROWING MORE AND MORE. WITH THE ADVENT OF DIGITAL TRANSFORMATION, INDUSTRIAL ENVIRONMENTS HAVE MOVED FROM AN ISOLATED SCENARIO TO AN INCREASINGLY CONNECTED WITH NEW TECHNOLOGIES, WHICH EXPOSES SUCH ENVIRONMENTS TO MAJOR THREATS. CONSIDERING THE CRITICALITY OF THESE ENVIRONMENTS, THE IMPACTS CAN RANGE FROM OPERATIONAL COSTS TO CATASTROPHES IN HEALTH AND SAFETY (E.G. EXPLOSION OF A POWER PLANT). THEREFORE, IT BECOMES NECESSARY TO ADOPT INNOVATIVE SOLUTIONS CAPABLE OF COMBATING INCREASINGLY ADVANCED THREATS, ESPECIALLY CONSIDERING THE PARTICULARITIES OF AN INDUSTRIAL ENVIRONMENT (HIGHLY LEGACY SYSTEMS, DESIGNED WITHOUT SECURITY CRITERIA, WITH HIGHLY PROPRIETARY PROTOCOLS). THE MAIN OBJECTIVE OF THIS SOLUTION IS TO CONTINUOUSLY MONITOR THE AUTOMATION ENVIRONMENT TO DETECT CYBERSECURITY THREATS AS WELL AS ANOMALOUS BEHAVIOR AND RESPOND TO THESE THREATS THROUGH NOVEL FUNCTIONALITIES. FURTHERMORE, THE SOLUTION ALLOWS ASSET MANAGEMENT BY INVENTORYING ALL DEVICES CONNECTED TO THE NETWORK (INCLUDING PLC ETC). IN ADDITION, THE SOLUTION PROVIDES VULNERABILITY MANAGEMENT REPORTING THE WEAKNESSES OF EACH ASSET INVENTORIED. TO CONCLUDE, A SECURITY OPERATION CENTER IS ESTABLISHED BETWEEN THE CORPORATE AND INDUSTRIAL ENVIRONMENTS, CREATING AN INTEGRATED CYBERSECURITY ECOSYSTEM.

 

CYBER THREATS ARE GROWING MORE AND MORE. WITH THE ADVENT OF DIGITAL TRANSFORMATION, INDUSTRIAL ENVIRONMENTS HAVE MOVED FROM AN ISOLATED SCENARIO TO AN INCREASINGLY CONNECTED WITH NEW TECHNOLOGIES, WHICH EXPOSES SUCH ENVIRONMENTS TO MAJOR THREATS. CONSIDERING THE CRITICALITY OF THESE ENVIRONMENTS, THE IMPACTS CAN RANGE FROM OPERATIONAL COSTS TO CATASTROPHES IN HEALTH AND SAFETY (E.G. EXPLOSION OF A POWER PLANT). THEREFORE, IT BECOMES NECESSARY TO ADOPT INNOVATIVE SOLUTIONS CAPABLE OF COMBATING INCREASINGLY ADVANCED THREATS, ESPECIALLY CONSIDERING THE PARTICULARITIES OF AN INDUSTRIAL ENVIRONMENT (HIGHLY LEGACY SYSTEMS, DESIGNED WITHOUT SECURITY CRITERIA, WITH HIGHLY PROPRIETARY PROTOCOLS). THE MAIN OBJECTIVE OF THIS SOLUTION IS TO CONTINUOUSLY MONITOR THE AUTOMATION ENVIRONMENT TO DETECT CYBERSECURITY THREATS AS WELL AS ANOMALOUS BEHAVIOR AND RESPOND TO THESE THREATS THROUGH NOVEL FUNCTIONALITIES. FURTHERMORE, THE SOLUTION ALLOWS ASSET MANAGEMENT BY INVENTORYING ALL DEVICES CONNECTED TO THE NETWORK (INCLUDING PLC ETC). IN ADDITION, THE SOLUTION PROVIDES VULNERABILITY MANAGEMENT REPORTING THE WEAKNESSES OF EACH ASSET INVENTORIED. TO CONCLUDE, A SECURITY OPERATION CENTER IS ESTABLISHED BETWEEN THE CORPORATE AND INDUSTRIAL ENVIRONMENTS, CREATING AN INTEGRATED CYBERSECURITY ECOSYSTEM.

Keywords

Cyber Security; Generative AI; Network Detection and Response; Security Operation Center

Cyber Security; Generative AI; Network Detection and Response; Security Operation Center.

How to refer

BAIÔCO, GLEISON; PERDIGÃO, ANA PAULA; PEREIRA, FELIPE CARVALHO. ESTABLISHING AN INTEGRATED IT/OT SOC SUPPORTED BY AN AI-POWERED NDR SOLUTION , p. 688-700. In: 26º Seminário de Automação e TI, São Paulo, Brasil, 2024.
ISSN: 2594-5335 , DOI 10.5151/2594-5335-41563

Whoops, looks like something went wrong.

(1/1) ErrorException

fwrite(): write of 1826 bytes failed with errno=28 No space left on device
in StreamHandler.php line 131
at HandleExceptions->handleError(8, 'fwrite(): write of 1826 bytes failed with errno=28 No space left on device', '/var/www/webroot/ROOT/vendor/monolog/monolog/src/Monolog/Handler/StreamHandler.php', 131, array('stream' => resource, 'record' => array('message' => 'file_put_contents(): write of 335 bytes failed with errno=28 No space left on device', 'context' => array('exception' => object(ErrorException)), 'level' => 400, 'level_name' => 'ERROR', 'channel' => 'production', 'datetime' => object(DateTime), 'extra' => array(), 'formatted' => '[2025-05-30 20:18:41] production.ERROR: file_put_contents(): write of 335 bytes failed with errno=28 No space left on device {"exception":"[object] (ErrorException(code: 0): file_put_contents(): write of 335 bytes failed with errno=28 No space left on device at /var/www/webroot/ROOT/vendor/laravel/framework/src/Illuminate/Filesystem/Filesystem.php:122)[stacktrace]#0 [internal function]: Illuminate\\\\Foundation\\\\Bootstrap\\\\HandleExceptions->handleError(8, \'file_put_conten...\', \'/var/www/webroo...\', 122, Array)#1 /var/www/webroot/ROOT/vendor/laravel/framework/src/Illuminate/Filesystem/Filesystem.php(122): file_put_contents(\'/var/www/webroo...\', \'a:5:{s:6:\\"_toke...\', 2)#2 /var/www/webroot/ROOT/vendor/laravel/framework/src/Illuminate/Session/FileSessionHandler.php(83): Illuminate\\\\Filesystem\\\\Filesystem->put(\'/var/www/webroo...\', \'a:5:{s:6:\\"_toke...\', true)#3 /var/www/webroot/ROOT/vendor/laravel/framework/src/Illuminate/Session/Store.php(128): Illuminate\\\\Session\\\\FileSessionHandler->write(\'0UD2SdvsG0w3fxv...\', \'a:5:{s:6:\\"_toke...\')#4 /var/www/webroot/ROOT/vendor/laravel/framework/src/Illuminate/Session/Middleware/StartSession.php(87): Illuminate\\\\Session\\\\Store->save()#5 /var/www/webroot/ROOT/vendor/laravel/framework/src/Illuminate/Foundation/Http/Kernel.php(218): Illuminate\\\\Session\\\\Middleware\\\\StartSession->terminate(Object(Illuminate\\\\Http\\\\Request), Object(Illuminate\\\\Http\\\\Response))#6 /var/www/webroot/ROOT/vendor/laravel/framework/src/Illuminate/Foundation/Http/Kernel.php(189): Illuminate\\\\Foundation\\\\Http\\\\Kernel->terminateMiddleware(Object(Illuminate\\\\Http\\\\Request), Object(Illuminate\\\\Http\\\\Response))#7 /var/www/webroot/ROOT/public/index.php(59): Illuminate\\\\Foundation\\\\Http\\\\Kernel->terminate(Object(Illuminate\\\\Http\\\\Request), Object(Illuminate\\\\Http\\\\Response))#8 {main}"} ')))
at fwrite(resource, '[2025-05-30 20:18:41] production.ERROR: file_put_contents(): write of 335 bytes failed with errno=28 No space left on device {"exception":"[object] (ErrorException(code: 0): file_put_contents(): write of 335 bytes failed with errno=28 No space left on device at /var/www/webroot/ROOT/vendor/laravel/framework/src/Illuminate/Filesystem/Filesystem.php:122)[stacktrace]#0 [internal function]: Illuminate\\\\Foundation\\\\Bootstrap\\\\HandleExceptions->handleError(8, \'file_put_conten...\', \'/var/www/webroo...\', 122, Array)#1 /var/www/webroot/ROOT/vendor/laravel/framework/src/Illuminate/Filesystem/Filesystem.php(122): file_put_contents(\'/var/www/webroo...\', \'a:5:{s:6:\\"_toke...\', 2)#2 /var/www/webroot/ROOT/vendor/laravel/framework/src/Illuminate/Session/FileSessionHandler.php(83): Illuminate\\\\Filesystem\\\\Filesystem->put(\'/var/www/webroo...\', \'a:5:{s:6:\\"_toke...\', true)#3 /var/www/webroot/ROOT/vendor/laravel/framework/src/Illuminate/Session/Store.php(128): Illuminate\\\\Session\\\\FileSessionHandler->write(\'0UD2SdvsG0w3fxv...\', \'a:5:{s:6:\\"_toke...\')#4 /var/www/webroot/ROOT/vendor/laravel/framework/src/Illuminate/Session/Middleware/StartSession.php(87): Illuminate\\\\Session\\\\Store->save()#5 /var/www/webroot/ROOT/vendor/laravel/framework/src/Illuminate/Foundation/Http/Kernel.php(218): Illuminate\\\\Session\\\\Middleware\\\\StartSession->terminate(Object(Illuminate\\\\Http\\\\Request), Object(Illuminate\\\\Http\\\\Response))#6 /var/www/webroot/ROOT/vendor/laravel/framework/src/Illuminate/Foundation/Http/Kernel.php(189): Illuminate\\\\Foundation\\\\Http\\\\Kernel->terminateMiddleware(Object(Illuminate\\\\Http\\\\Request), Object(Illuminate\\\\Http\\\\Response))#7 /var/www/webroot/ROOT/public/index.php(59): Illuminate\\\\Foundation\\\\Http\\\\Kernel->terminate(Object(Illuminate\\\\Http\\\\Request), Object(Illuminate\\\\Http\\\\Response))#8 {main}"} ')in StreamHandler.php line 131
at StreamHandler->streamWrite(resource, array('message' => 'file_put_contents(): write of 335 bytes failed with errno=28 No space left on device', 'context' => array('exception' => object(ErrorException)), 'level' => 400, 'level_name' => 'ERROR', 'channel' => 'production', 'datetime' => object(DateTime), 'extra' => array(), 'formatted' => '[2025-05-30 20:18:41] production.ERROR: file_put_contents(): write of 335 bytes failed with errno=28 No space left on device {"exception":"[object] (ErrorException(code: 0): file_put_contents(): write of 335 bytes failed with errno=28 No space left on device at /var/www/webroot/ROOT/vendor/laravel/framework/src/Illuminate/Filesystem/Filesystem.php:122)[stacktrace]#0 [internal function]: Illuminate\\\\Foundation\\\\Bootstrap\\\\HandleExceptions->handleError(8, \'file_put_conten...\', \'/var/www/webroo...\', 122, Array)#1 /var/www/webroot/ROOT/vendor/laravel/framework/src/Illuminate/Filesystem/Filesystem.php(122): file_put_contents(\'/var/www/webroo...\', \'a:5:{s:6:\\"_toke...\', 2)#2 /var/www/webroot/ROOT/vendor/laravel/framework/src/Illuminate/Session/FileSessionHandler.php(83): Illuminate\\\\Filesystem\\\\Filesystem->put(\'/var/www/webroo...\', \'a:5:{s:6:\\"_toke...\', true)#3 /var/www/webroot/ROOT/vendor/laravel/framework/src/Illuminate/Session/Store.php(128): Illuminate\\\\Session\\\\FileSessionHandler->write(\'0UD2SdvsG0w3fxv...\', \'a:5:{s:6:\\"_toke...\')#4 /var/www/webroot/ROOT/vendor/laravel/framework/src/Illuminate/Session/Middleware/StartSession.php(87): Illuminate\\\\Session\\\\Store->save()#5 /var/www/webroot/ROOT/vendor/laravel/framework/src/Illuminate/Foundation/Http/Kernel.php(218): Illuminate\\\\Session\\\\Middleware\\\\StartSession->terminate(Object(Illuminate\\\\Http\\\\Request), Object(Illuminate\\\\Http\\\\Response))#6 /var/www/webroot/ROOT/vendor/laravel/framework/src/Illuminate/Foundation/Http/Kernel.php(189): Illuminate\\\\Foundation\\\\Http\\\\Kernel->terminateMiddleware(Object(Illuminate\\\\Http\\\\Request), Object(Illuminate\\\\Http\\\\Response))#7 /var/www/webroot/ROOT/public/index.php(59): Illuminate\\\\Foundation\\\\Http\\\\Kernel->terminate(Object(Illuminate\\\\Http\\\\Request), Object(Illuminate\\\\Http\\\\Response))#8 {main}"} '))in StreamHandler.php line 117
at StreamHandler->write(array('message' => 'file_put_contents(): write of 335 bytes failed with errno=28 No space left on device', 'context' => array('exception' => object(ErrorException)), 'level' => 400, 'level_name' => 'ERROR', 'channel' => 'production', 'datetime' => object(DateTime), 'extra' => array(), 'formatted' => '[2025-05-30 20:18:41] production.ERROR: file_put_contents(): write of 335 bytes failed with errno=28 No space left on device {"exception":"[object] (ErrorException(code: 0): file_put_contents(): write of 335 bytes failed with errno=28 No space left on device at /var/www/webroot/ROOT/vendor/laravel/framework/src/Illuminate/Filesystem/Filesystem.php:122)[stacktrace]#0 [internal function]: Illuminate\\\\Foundation\\\\Bootstrap\\\\HandleExceptions->handleError(8, \'file_put_conten...\', \'/var/www/webroo...\', 122, Array)#1 /var/www/webroot/ROOT/vendor/laravel/framework/src/Illuminate/Filesystem/Filesystem.php(122): file_put_contents(\'/var/www/webroo...\', \'a:5:{s:6:\\"_toke...\', 2)#2 /var/www/webroot/ROOT/vendor/laravel/framework/src/Illuminate/Session/FileSessionHandler.php(83): Illuminate\\\\Filesystem\\\\Filesystem->put(\'/var/www/webroo...\', \'a:5:{s:6:\\"_toke...\', true)#3 /var/www/webroot/ROOT/vendor/laravel/framework/src/Illuminate/Session/Store.php(128): Illuminate\\\\Session\\\\FileSessionHandler->write(\'0UD2SdvsG0w3fxv...\', \'a:5:{s:6:\\"_toke...\')#4 /var/www/webroot/ROOT/vendor/laravel/framework/src/Illuminate/Session/Middleware/StartSession.php(87): Illuminate\\\\Session\\\\Store->save()#5 /var/www/webroot/ROOT/vendor/laravel/framework/src/Illuminate/Foundation/Http/Kernel.php(218): Illuminate\\\\Session\\\\Middleware\\\\StartSession->terminate(Object(Illuminate\\\\Http\\\\Request), Object(Illuminate\\\\Http\\\\Response))#6 /var/www/webroot/ROOT/vendor/laravel/framework/src/Illuminate/Foundation/Http/Kernel.php(189): Illuminate\\\\Foundation\\\\Http\\\\Kernel->terminateMiddleware(Object(Illuminate\\\\Http\\\\Request), Object(Illuminate\\\\Http\\\\Response))#7 /var/www/webroot/ROOT/public/index.php(59): Illuminate\\\\Foundation\\\\Http\\\\Kernel->terminate(Object(Illuminate\\\\Http\\\\Request), Object(Illuminate\\\\Http\\\\Response))#8 {main}"} '))in AbstractProcessingHandler.php line 39
at AbstractProcessingHandler->handle(array('message' => 'file_put_contents(): write of 335 bytes failed with errno=28 No space left on device', 'context' => array('exception' => object(ErrorException)), 'level' => 400, 'level_name' => 'ERROR', 'channel' => 'production', 'datetime' => object(DateTime), 'extra' => array(), 'formatted' => '[2025-05-30 20:18:41] production.ERROR: file_put_contents(): write of 335 bytes failed with errno=28 No space left on device {"exception":"[object] (ErrorException(code: 0): file_put_contents(): write of 335 bytes failed with errno=28 No space left on device at /var/www/webroot/ROOT/vendor/laravel/framework/src/Illuminate/Filesystem/Filesystem.php:122)[stacktrace]#0 [internal function]: Illuminate\\\\Foundation\\\\Bootstrap\\\\HandleExceptions->handleError(8, \'file_put_conten...\', \'/var/www/webroo...\', 122, Array)#1 /var/www/webroot/ROOT/vendor/laravel/framework/src/Illuminate/Filesystem/Filesystem.php(122): file_put_contents(\'/var/www/webroo...\', \'a:5:{s:6:\\"_toke...\', 2)#2 /var/www/webroot/ROOT/vendor/laravel/framework/src/Illuminate/Session/FileSessionHandler.php(83): Illuminate\\\\Filesystem\\\\Filesystem->put(\'/var/www/webroo...\', \'a:5:{s:6:\\"_toke...\', true)#3 /var/www/webroot/ROOT/vendor/laravel/framework/src/Illuminate/Session/Store.php(128): Illuminate\\\\Session\\\\FileSessionHandler->write(\'0UD2SdvsG0w3fxv...\', \'a:5:{s:6:\\"_toke...\')#4 /var/www/webroot/ROOT/vendor/laravel/framework/src/Illuminate/Session/Middleware/StartSession.php(87): Illuminate\\\\Session\\\\Store->save()#5 /var/www/webroot/ROOT/vendor/laravel/framework/src/Illuminate/Foundation/Http/Kernel.php(218): Illuminate\\\\Session\\\\Middleware\\\\StartSession->terminate(Object(Illuminate\\\\Http\\\\Request), Object(Illuminate\\\\Http\\\\Response))#6 /var/www/webroot/ROOT/vendor/laravel/framework/src/Illuminate/Foundation/Http/Kernel.php(189): Illuminate\\\\Foundation\\\\Http\\\\Kernel->terminateMiddleware(Object(Illuminate\\\\Http\\\\Request), Object(Illuminate\\\\Http\\\\Response))#7 /var/www/webroot/ROOT/public/index.php(59): Illuminate\\\\Foundation\\\\Http\\\\Kernel->terminate(Object(Illuminate\\\\Http\\\\Request), Object(Illuminate\\\\Http\\\\Response))#8 {main}"} '))in Logger.php line 344
at Logger->addRecord(400, 'file_put_contents(): write of 335 bytes failed with errno=28 No space left on device', array('exception' => object(ErrorException)))in Logger.php line 707
at Logger->error('file_put_contents(): write of 335 bytes failed with errno=28 No space left on device', array('exception' => object(ErrorException)))in Writer.php line 203
at Writer->writeLog('error', 'file_put_contents(): write of 335 bytes failed with errno=28 No space left on device', array('exception' => object(ErrorException)))in Writer.php line 114
at Writer->error('file_put_contents(): write of 335 bytes failed with errno=28 No space left on device', array('exception' => object(ErrorException)))in Handler.php line 113
at Handler->report(object(ErrorException))in Handler.php line 100
at Handler->report(object(ErrorException))in HandleExceptions.php line 81
at HandleExceptions->handleException(object(ErrorException))