MITRE D3FENDdefensive technique
D3-APM Application Performance Monitoring
- Tactic
- Detect
Definition
Monitoring the count and duration of the application or program cycle.
How it works
How it works
Keeping track of the controller cycle time by logging it, setting alarms, and correlating with other events. Changes to cycle time can be indicative of injecting new logic, deleting logic, or system failures.
Related
Child of · MITRE D3FEND (1)
- D3-PM Platform Monitoring defensive technique
Referenced by MITRE D3FEND · child of (1)
- D3-AEM Application Exception Monitoring defensive technique
References
- https://plc-security.com/ Secure PLC Coding Practices: Top 20 List