<commit_before># Applied Resiliency for More Trustworthy Grid Operation (ARMORE)


*(Scheduled for beta release Fall 2015)*

## ARMORE

ARMORE is being developed to be an open-source software solution that will aid asset owners by increasing visibility, securing communications, and inspecting ICS communications for behavior that is not intended.

* Identify
	* ARMORE aids in detecting assets and can provide some passively learned metadata regarding those assets.
* Detect
	* ARMORE inspects traffic looking for unintended communications or undesirable behavior.
* Protect
	* ARMORE can alarm or enforce a defined policy.
* Respond
	* ARMORE can be utilized to feed into other decision systems, aid visualization of situational awareness, or if configured, serve as a forensic tool to investigate suspicious traffic.


## More Details

ARMORE combines inspection with optional actions, including alarming or enforcement when communications do not comply with an instantiated ARMORE policy. This can work for many standard protocols, but ARMORE is focused on Industrial Control Systems and currently targets DNP3 and Modbus for its primary policies.

To aid visibility, ARMORE tracks ICS communications to gather statistics on communications patterns, conversation pairs, and details about what the communications is about. For example, ARMORE can tell you the frequency that two hosts communicate, what protocols they speak, what functions they call and what the targets are of those functions. ARMORE could even be set to look at the values and determine if they are in range, or hand those values off for additional computation. Computation hooks could be leveraged to feed the results into state estimation functions, calculate averages in a time window, look for value trends, or many other features.<commit_msg>beta release update to readme<commit_after># Applied Resiliency for More Trustworthy Grid Operation (ARMORE)


*BETA released April 18, 2016*

## ARMORE

ARMORE is being developed to be an open-source software solution that will aid asset owners by increasing visibility, securing communications, and inspecting ICS communications for behavior that is not intended.

* Identify
	* ARMORE aids in detecting assets and can provide some passively learned metadata regarding those assets.
* Detect
	* ARMORE inspects traffic looking for unintended communications or undesirable behavior.
* Protect
	* ARMORE can alarm or enforce a defined policy.
* Respond
	* ARMORE can be utilized to feed into other decision systems, aid visualization of situational awareness, or if configured, serve as a forensic tool to investigate suspicious traffic.


## More Details

ARMORE combines inspection with optional actions, including alarming or enforcement when communications do not comply with an instantiated ARMORE policy. This can work for many standard protocols, but ARMORE is focused on Industrial Control Systems and currently targets DNP3 and Modbus for its primary policies.

To aid visibility, ARMORE tracks ICS communications to gather statistics on communications patterns, conversation pairs, and details about what the communications is about. For example, ARMORE can tell you the frequency that two hosts communicate, what protocols they speak, what functions they call and what the targets are of those functions. ARMORE could even be set to look at the values and determine if they are in range, or hand those values off for additional computation. Computation hooks could be leveraged to feed the results into state estimation functions, calculate averages in a time window, look for value trends, or many other features.
{'fraction_non_alphanumeric': 0.027716794731064764, 'fraction_numerical': 0.003293084522502744, 'mean_word_length': 5.157094594594595, 'pattern_counts': {'":': 0, '<': 3, '<?xml version=': 0, '>': 3, 'https://': 0, 'lorem ipsum': 0, 'www.': 0, 'xml': 0}, 'pii_count': 0, 'substrings_counts': 0, 'word_list_counts': {'cursed_substrings.json': 0, 'profanity_word_list.json': 0, 'sexual_word_list.json': 0, 'zh_pornsignals.json': 0}}
{'dir': 'git-commits-cleaned', 'id': '7162093', 'n_tokens_mistral': 818, 'n_tokens_neox': 739, 'n_words': 522}