Stamus OT Security Technical Brief

Nothing Should Ever Be New Here: Behavioural Detection for OT, ICS and SCADA Networks

Industrial networks are engineered to do the same thing, the same way, for years. This technical brief from Stamus Networks explains how to turn that predictability into precise, low-noise detection. It covers SIGHTINGS (every communication artifact seen for the first time), outlier events (new behaviour per asset, per eight-hour shift) and Host Insights (an asset inventory built passively from observed traffic), all without agents, scanning or changes to the process network.

Inside: why novelty detection fails in IT but works in OT, protocol coverage for IEC-104, Modbus, DNP3, EtherNet/IP, S7, BACnet and MQTT, an intrusion mapped stage by stage to its first observable signal, and deployment guidance for boundary and in-zone probes, including air-gapped sites.

For: OT security architects, ICS and SCADA engineers and SOC leads. Platform: Stamus Clear 43+. 8 pages, PDF.

Attached Files

• Version
• File Size 319.09 KB
• File Count 1
• Create Date October 10, 2026
• Last Updated October 24, 2026