IKARUS OT Security Sensor Guardian

OT Security Sensor Guardian by Nozomi Networks, distributed by IKARUS Security Software, is a passive security solution for monitoring industrial OT and IoT networks. It is deployed as hardware, containers, or virtual appliances and operates without causing network interruptions upon installation. The sensor provides continuous visibility into OT and IoT assets, network communications, and infrastructure topology through asset inventory, monitoring, and discovery. It uses passive traffic analysis to detect anomalies, misbehaviour, and cyber threats in real time, alerting operators before damage occurs. Key functional components include: - Asset Intelligence: Delivers ongoing updates on OT/IoT device profiles, matching activity against learned baselines to reduce false positives. - Threat Intelligence: Provides current threat data via Packet Rules, YARA Rules, and STIX indicators, covering ransomware, malware, DDoS, and MITM attacks. - Smart Polling: A software add-on enabling active polling for vulnerability assessment across network segments, reporting on OS, firmware, patch levels, and USB devices on Windows systems. - Nozomi Arc Endpoint Sensor: A software agent for PC-based systems that performs log file analysis via SIGMA rules, insider threat detection, and USB device monitoring. - Protection Mode: Activates defensive measures in response to detected threats. - Rugged Guardians: Hardened hardware variants for deployment in control cabinets to monitor disconnected automation networks. The solution is scalable and integrates with existing protection systems such as firewalls. Interactive network graphs provide visual representation of assets and their communications. IKARUS acts as a Nozomi Certified Platinum and Elite MSSP Partner for this offering.