Sophia Daemon Version 12 contains the code that is exclusively used by the sophiad application. It runs as a service on a Linux host and analyzes network traffic obtained from libpcap and produces a network fingerprint based on hosts and channels. Sophia Daemon Version 12 can, if desired by the user, produce alerts when its fingerprint changes. Sophia Daemon Version 12 can receive data from another Sophia Daemon or raw packet data. It can output data to another Sophia Daemon Version 12, OglNet Version 12 or MySQL. Sophia Daemon Version 12 runs in a passive real-time manner that allows it to be used on a SCADA network. Its network fingerprint is designed to be applicable to SCADA networks rather than general IT networks.
To order this software or receive further information, please fill out the following request: Request Software
Verba, Jared A., Rueff, Gordon H., Rohde, Kenneth W., Thuen, Corey W., and Erbes, Robert J. Sophia Daemon Version 12.
Computer software. Vers. 05. USDOE. 9 Aug. 2012.
Web.
Verba, Jared A., Rueff, Gordon H., Rohde, Kenneth W., Thuen, Corey W., & Erbes, Robert J. (2012, August 9). Sophia Daemon Version 12 (Version 05) [Computer software].
Verba, Jared A., Rueff, Gordon H., Rohde, Kenneth W., Thuen, Corey W., and Erbes, Robert J. Sophia Daemon Version 12.
Computer software. Version 05. August 9, 2012.
@misc{osti_1231602,
title = {Sophia Daemon Version 12, Version 05},
author = {Verba, Jared A. and Rueff, Gordon H. and Rohde, Kenneth W. and Thuen, Corey W. and Erbes, Robert J.},
abstractNote = {Sophia Daemon Version 12 contains the code that is exclusively used by the sophiad application. It runs as a service on a Linux host and analyzes network traffic obtained from libpcap and produces a network fingerprint based on hosts and channels. Sophia Daemon Version 12 can, if desired by the user, produce alerts when its fingerprint changes. Sophia Daemon Version 12 can receive data from another Sophia Daemon or raw packet data. It can output data to another Sophia Daemon Version 12, OglNet Version 12 or MySQL. Sophia Daemon Version 12 runs in a passive real-time manner that allows it to be used on a SCADA network. Its network fingerprint is designed to be applicable to SCADA networks rather than general IT networks.},
doi = {},
url = {https://www.osti.gov/biblio/1231602},
year = {Thu Aug 09 00:00:00 EDT 2012},
month = {Thu Aug 09 00:00:00 EDT 2012},
note =
}
