Abstract: Various embodiments described herein relate to providing spatially-efficient and comprehensive visualization of cyber-risk data associated with a plurality of assets. In one embodiment, a method is provided. The method includes accessing cyber-risk data associated with one or more particular assets of a plurality of assets. The method further includes determining whether the cyber-risk data for each particular asset satisfies one or more visual configuration thresholds, and in accordance with a determination that the cyber-risk data satisfies the thresholds, configuring one or more visual nodes of a hierarchical asset graph for the plurality of assets based at least in part on one or more asset groupings. The one or more visual nodes correspond to the particular assets and are configured to visually indicate the cyber-risk data that satisfies the visual configuration thresholds. The method further includes providing the hierarchical asset graph for display.

Abstract: This disclosure provides an apparatus and method for identifying and retrospecting cyber security threats, including but not limited to in industrial control systems and other systems. A method includes receiving, by a risk manager system, a selection of an asset for analysis. The method includes receiving, by the risk manager system, current and historical cyber-risk data corresponding to the asset. The method includes receiving a user selection of one or more data options for analysis of the asset. The method includes identifying relevant portions of the current and historical cyber-risk data according to the selected data options. The method includes producing an output corresponding to the selected asset, the selected data options, and the identified relevant portions of the current and historical cyber-risk data. The method includes displaying the output as a report in a graphical user interface.

Abstract: There is provided a modified Ethernet switch for directing data packets to and from a plurality of Ethernet ports. The switch is arranged to forward each data packet outgoing to one of the ports to the correct port as determined by an address lookup table. The switch is operable in two modes. In the first mode, the switch is arranged to forward each data packet incoming from one of the ports to its correct destination port as determined by the address lookup table. In the second mode, the switch is arranged to forward each data packet incoming from one of the ports to a processor. The address lookup table is maintained by the switch. The switch comprises a control block for switching the switch between the first mode and the second mode.