ETHOS is designed to share real-time information to develop early warning mechanisms for investigating anomalous behavior across a wide range of operational technology (OT) and industrial control systems (ICS) environments, rather than sharing data after alerting on known detections and malware signatures.
ETHOS automates the frequency analysis of novel threats and activity, and enables faster responses to new tactics, techniques, and procedures (TTPs) as they emerge. Benefits include reduced timelines for refining data to identify and classify new threats and prevention of more severe attack paths from successful exploitation.
Built for OT environments, any entity or security vendor may contribute to the project and host their own server to:
- Compare shared information,
- Contribute anonymized data, and
- Receive notifications of correlations. ..read more!
