DOE OSTI · code-119886
Sophia Daemon Version 12
Abstract
Sophia Daemon Version 12 contains the code that is exclusively used by the sophiad application. It runs as a service on a Linux host and analyzes network traffic obtained from libpcap and produces a network fingerprint based on hosts and channels. Sophia Daemon Version 12 can, if desired by the user, produce alerts when its fingerprint changes. Sophia Daemon Version 12 can receive data from another Sophia Daemon or raw packet data. It can output data to another Sophia Daemon Version 12, OglNet Version 12 or MySQL. Sophia Daemon Version 12 runs in a passive real-time manner that allows it to be used on a SCADA network. Its network fingerprint is designed to be applicable to SCADA networks rather than general IT networks.
Keep this discovery
Explore connections, maps & timelines
Verba, JaredA., Rueff, GordonH., Rohde, KennethW., Thuen, CoreyW., Erbes, RobertJ.. 2012-08-09. Sophia Daemon Version 12. https://doi.org/10.11578/dc.20240117.304
Cite the original work for its findings. Save a collection to share your selection of sources.