Special Notice NAICS 518210

Open Source Software: ICSNPP: Advanced Industrial Control System Protocol Parsing for Zeek In an era where industrial control systems (ICS) are increasingly targeted by sophisticated threats, ensuring robust network security is paramount. ICSNPP (Industrial Control System Network Protocol Parsers) emerges as a critical solution, providing an advanced protocol parser suite that integrates seamlessly with the Zeek network security monitoring framework. The evolution of cyber threats targeting industrial environments necessitated the development of specialized tools capable of understanding and monitoring the unique protocols these systems use. DHS/CISA funded ICSNPP to address this gap, enhancing hunt and incident response capabilities within ICS environments. This project aims to bolster the security of CISA's network sensors and democratize access to this advanced technology by making it open-source on GitHub. ICSNPP is a collection of Zeek plugin protocol parsers tailored for the industrial control sector. It currently supports four major ICS protocols: BACnet, DNP3, Ethernet/IP, and Modbus, with expansion plans. Unlike general Zeek protocol parsers, ICSNPP delves into the intrica...

Notice ID: b29aa7c6004449d393aac9444f48c452 · View on SAM.gov ↗