A Secure Network Scanner Architecture for Asset Management in Strongly Segmented ICS Networks

This GIT provides all necessary material to setup the network scanner for industrial networks. The network scanner is based on a strict segmentation between the OT and IT network. For this two Raspberry Pis, one in the IT network and the other in the OT network are used. These are communicating over a SPI bus with each other, where a microcontroller is placed in acting as a data filter/diode.

Prototype

All this is implemented on a central PCB, where all parts get attached to. The image below shows the PCB of the network scanner.

A fully assebled network scanner, with the two Raspberry Pis and OLED displays is illustraed below.

Scan control and results (Web frontend)

The scan can be started and stopped over the web frontend.

The results are shown in a table.

Content

• Software
• Hardware
• Images