Airbus OT Security Operation Center

Detect complex cyber-physical threats, provide enriched alerts for security analysts decision, optimise incident response.

Input(s):

• Network Logs
• IDS alerts
• IoCs

Main feature(s):

• Log correlation & analysis
• Alert enrichment
• IoC sharing

Output(s):

• Enriched Alerts
• Mitigation plans
• Incident Response

• SIEM/SOAR (e.g.: QRadar, Splunk, the Hive, …)
• OT NIDS (e.g.: Nozomi, Foescout, …)

Cybersecurity operators and analysts.

• For research purpose: Collaboration Agreement
• For business purpose: Managed Security Service Contract