Researchers have described a novel “dead man’s PLC attack” where a compromise can detect recovery attempts and “lock-up” the entire environment.

Splice detects the lateral movement attempts and anomalous inter-PLC communications as part of the attack design during dwell time, providing advanced notice in the early stages of such an attack.