{"id":1541,"date":"2024-03-07T08:57:42","date_gmt":"2024-03-07T08:57:42","guid":{"rendered":"https:\/\/inprotech.es\/?p=1541"},"modified":"2025-02-17T11:13:58","modified_gmt":"2025-02-17T11:13:58","slug":"1541","status":"publish","type":"post","link":"https:\/\/inprotech.es\/en\/1541\/","title":{"rendered":"Success Story in Takasago: UEBA Alerts & Process Mining"},"content":{"rendered":"

One of our company’s most significant success stories has been the development and deployment of InprOTech Guardian, an anomaly detection system<\/strong> based on behavior and process mining at the Takasago<\/a> industrial plant<\/strong>.<\/p>\n

This is a major R&D project funded by the CDTI<\/a><\/strong> (Spanish Centre for the Development of Industrial Technology), a public corporate entity under the Ministry of Science, Innovation and Universities, and supported by the Ministry of Science, Innovation and Universities, carried out between October 2021 and February 2024.<\/p>\n

Takasago International Corporation is a chemical company originating from Japan<\/strong>, established in 1920. It specializes in the production of flavors and fragrances, ingredients for the food industry, as well as fine chemicals. Its activities span various sectors, including food and beverages, perfumery, cosmetics, and personal care products, among others.<\/p>\n

It has a significant international presence<\/strong>, with operations and subsidiaries in numerous countries around the world<\/strong>, including the Americas, Europe, Asia, and Oceania, and is listed on the Tokyo Stock Exchange. In Spain, the industrial plant is located in El Palmar (Murcia).<\/strong><\/p>\n\n

THE CHALLENGE<\/h2>\n

Takasago has a high level of operational excellence<\/strong> and is constantly seeking improvements in the efficiency and effectiveness of industrial processes, aiming at aspects such as reducing anomalies and potential cyber-attacks.<\/strong><\/p>\n

These eventualities<\/strong>, whether at the level of safety<\/em> or security<\/em>, can potentially lead to plant shutdowns<\/strong> (with the associated economic cost), problems with information integrity or processes with potential impact on the health of staff or customers<\/strong>, and even losses of confidentiality<\/strong> through leaks of personal data or industrial property.<\/p>\n

All these issues<\/strong> are critical<\/strong> from a strategic and business continuity perspective<\/strong>.<\/p>\n

INPROTECH SOLUTION<\/h2>\n

In this situation, InprOTech proposed two measures:<\/p>\n

    \n
  1. The deployment<\/strong> of the InprOTech Guardian<\/strong> asset inventory and anomaly detection solution in industrial environments, to cover some gaps in preventive controls and information security detection in Takasago’s industrial network defense-in-depth scheme.<\/li>\n
  2. To conduct research, development, and implementation of an anomaly detection capability based on UEBA<\/strong> (User and Entity Behavior Analytics) and Process Mining, to detect potential security incidents<\/strong> based not only on traffic patterns but also on the behavior of variables involved in their critical processes (multivariable time series analysis).<\/li>\n<\/ol>\n

    This second component was developed over several months in collaboration with our technological partner Gradiant<\/a>.<\/strong><\/p>\n

    \u00a0<\/span><\/i><\/p>\n

    \"\"
    Pillars of a UEBA methodology: Data, Analytics, and Use Cases<\/em><\/figcaption><\/figure>\n

    \u00a0 \u00a0 \u00a0 \u00a0\u00a0<\/span><\/i><\/p>\n

    \"\"
    Diagram of Process Mining components<\/em><\/figcaption><\/figure>\n

     <\/p>\n

    RESULTS<\/h2>\n

    The implementation of the InprOTech Guardian service allows us to:<\/strong><\/p>\n

      \n
    • Know all assets connected to the network, inventorying<\/strong> exhaustively, automatically, and non-intrusively all assets<\/strong> present in the infrastructure.<\/li>\n
    • Have real-time monitoring of cybersecurity status in the factory<\/strong> through a specific service for OT networks.<\/li>\n
    • Generate security alerts<\/strong> by detecting anomalies based on heuristics, an intrusion detection system, and patterns (AI\/ML algorithms), exportable to a central event ingestion and correlation system (SIEM).<\/li>\n
    • Facilitate compliance with information security regulations by Takasago<\/strong> (ISO 27001, ISA IEC 62443, etc.).<\/li>\n<\/ul>\n

      The research, development, and integration into Guardian of the anomaly detection technique based on UEBA and Process Mining facilitated:<\/p>\n

        \n
      • The individual modeling of nodes and the analysis of process variables within the scope of Takasago’s industrial cybersecurity surveillance.<\/li>\n
      • The integration of this knowledge and new capability into InprOTech Guardian for use by the rest of the client portfolio.<\/li>\n<\/ul>\n

        TAKASAGO <\/span>TESTIMONIAL<\/span><\/h2>\n

        “From Takasago’s perspective, any systems that help detect anomalies in systems early are welcome. Thanks to the work developed, a new method for the early detection of intrusions in IT and OT systems has been proposed, avoiding possible interferences in the systems that could lead to dangerous situations, mainly in OT systems.<\/em>” – Fernando Manuel Mart\u00ednez Technical, EHS & IT Director of Takasago.<\/p>\n

        \u00a0<\/span><\/p>\n","protected":false},"excerpt":{"rendered":"

        One of our company’s most significant success stories has been the development and deployment of InprOTech Guardian, an anomaly detection system based on behavior and process mining at the Takasago industrial plant. This is a major R&D project funded by the CDTI (Spanish Centre for the Development of Industrial Technology), a public corporate entity under…<\/p>\n","protected":false},"author":1,"featured_media":1540,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"_acf_changed":false,"footnotes":""},"categories":[55],"tags":[],"class_list":["post-1541","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-success-stories"],"acf":[],"yoast_head":"\nSuccess Story in Takasago: UEBA Alerts & Process Mining - InprOTech<\/title>\n<meta name=\"description\" content=\"Discover how InprOTech Guardian revolutionized Takasago's industrial securityprocesses with advanced anomaly detection through behavior and process mining, enhancing operational excellence and cybersecurity.\" \/>\n<meta name=\"robots\" content=\"index, follow, max-snippet:-1, max-image-preview:large, max-video-preview:-1\" \/>\n<link rel=\"canonical\" href=\"https:\/\/inprotech.es\/en\/1541\/\" \/>\n<meta property=\"og:locale\" content=\"en_US\" \/>\n<meta property=\"og:type\" content=\"article\" \/>\n<meta property=\"og:title\" content=\"Success Story in Takasago: UEBA Alerts & Process Mining - InprOTech\" \/>\n<meta property=\"og:description\" content=\"Discover how InprOTech Guardian revolutionized Takasago's industrial securityprocesses with advanced anomaly detection through behavior and process mining, enhancing operational excellence and cybersecurity.\" \/>\n<meta property=\"og:url\" content=\"https:\/\/inprotech.es\/en\/1541\/\" \/>\n<meta property=\"og:site_name\" content=\"InprOTech\" \/>\n<meta property=\"article:published_time\" content=\"2024-03-07T08:57:42+00:00\" \/>\n<meta property=\"article:modified_time\" content=\"2025-02-17T11:13:58+00:00\" \/>\n<meta property=\"og:image\" content=\"https:\/\/inprotech.es\/wp-content\/uploads\/2024\/02\/proyecto-innotwin-takasago.jpg\" \/>\n\t<meta property=\"og:image:width\" content=\"1536\" \/>\n\t<meta property=\"og:image:height\" content=\"768\" \/>\n\t<meta property=\"og:image:type\" content=\"image\/jpeg\" \/>\n<meta name=\"author\" content=\"admin\" \/>\n<meta name=\"twitter:card\" content=\"summary_large_image\" \/>\n<meta name=\"twitter:label1\" content=\"Written by\" \/>\n\t<meta name=\"twitter:data1\" content=\"admin\" \/>\n\t<meta name=\"twitter:label2\" content=\"Est. reading time\" \/>\n\t<meta name=\"twitter:data2\" content=\"4 minutes\" \/>\n<script type=\"application\/ld+json\" class=\"yoast-schema-graph\">{\"@context\":\"https:\\\/\\\/schema.org\",\"@graph\":[{\"@type\":\"Article\",\"@id\":\"https:\\\/\\\/inprotech.es\\\/en\\\/1541\\\/#article\",\"isPartOf\":{\"@id\":\"https:\\\/\\\/inprotech.es\\\/en\\\/1541\\\/\"},\"author\":{\"name\":\"admin\",\"@id\":\"https:\\\/\\\/inprotech.es\\\/#\\\/schema\\\/person\\\/cb0ae1292b18b48c1e89b0e4e7ef15d9\"},\"headline\":\"Success Story in Takasago: UEBA Alerts & Process Mining\",\"datePublished\":\"2024-03-07T08:57:42+00:00\",\"dateModified\":\"2025-02-17T11:13:58+00:00\",\"mainEntityOfPage\":{\"@id\":\"https:\\\/\\\/inprotech.es\\\/en\\\/1541\\\/\"},\"wordCount\":618,\"commentCount\":0,\"image\":{\"@id\":\"https:\\\/\\\/inprotech.es\\\/en\\\/1541\\\/#primaryimage\"},\"thumbnailUrl\":\"https:\\\/\\\/inprotech.es\\\/wp-content\\\/uploads\\\/2024\\\/02\\\/proyecto-innotwin-takasago.jpg\",\"articleSection\":[\"Success Stories\"],\"inLanguage\":\"en-US\",\"potentialAction\":[{\"@type\":\"CommentAction\",\"name\":\"Comment\",\"target\":[\"https:\\\/\\\/inprotech.es\\\/en\\\/1541\\\/#respond\"]}]},{\"@type\":\"WebPage\",\"@id\":\"https:\\\/\\\/inprotech.es\\\/en\\\/1541\\\/\",\"url\":\"https:\\\/\\\/inprotech.es\\\/en\\\/1541\\\/\",\"name\":\"Success Story in Takasago: UEBA Alerts & Process Mining - InprOTech\",\"isPartOf\":{\"@id\":\"https:\\\/\\\/inprotech.es\\\/#website\"},\"primaryImageOfPage\":{\"@id\":\"https:\\\/\\\/inprotech.es\\\/en\\\/1541\\\/#primaryimage\"},\"image\":{\"@id\":\"https:\\\/\\\/inprotech.es\\\/en\\\/1541\\\/#primaryimage\"},\"thumbnailUrl\":\"https:\\\/\\\/inprotech.es\\\/wp-content\\\/uploads\\\/2024\\\/02\\\/proyecto-innotwin-takasago.jpg\",\"datePublished\":\"2024-03-07T08:57:42+00:00\",\"dateModified\":\"2025-02-17T11:13:58+00:00\",\"author\":{\"@id\":\"https:\\\/\\\/inprotech.es\\\/#\\\/schema\\\/person\\\/cb0ae1292b18b48c1e89b0e4e7ef15d9\"},\"description\":\"Discover how InprOTech Guardian revolutionized Takasago's industrial securityprocesses with advanced anomaly detection through behavior and process mining, enhancing operational excellence and cybersecurity.\",\"breadcrumb\":{\"@id\":\"https:\\\/\\\/inprotech.es\\\/en\\\/1541\\\/#breadcrumb\"},\"inLanguage\":\"en-US\",\"potentialAction\":[{\"@type\":\"ReadAction\",\"target\":[\"https:\\\/\\\/inprotech.es\\\/en\\\/1541\\\/\"]}]},{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\\\/\\\/inprotech.es\\\/en\\\/1541\\\/#primaryimage\",\"url\":\"https:\\\/\\\/inprotech.es\\\/wp-content\\\/uploads\\\/2024\\\/02\\\/proyecto-innotwin-takasago.jpg\",\"contentUrl\":\"https:\\\/\\\/inprotech.es\\\/wp-content\\\/uploads\\\/2024\\\/02\\\/proyecto-innotwin-takasago.jpg\",\"width\":1536,\"height\":768},{\"@type\":\"BreadcrumbList\",\"@id\":\"https:\\\/\\\/inprotech.es\\\/en\\\/1541\\\/#breadcrumb\",\"itemListElement\":[{\"@type\":\"ListItem\",\"position\":1,\"name\":\"Portada\",\"item\":\"https:\\\/\\\/inprotech.es\\\/en\\\/pagina-de-inicio\\\/\"},{\"@type\":\"ListItem\",\"position\":2,\"name\":\"Success Story in Takasago: UEBA Alerts & Process Mining\"}]},{\"@type\":\"WebSite\",\"@id\":\"https:\\\/\\\/inprotech.es\\\/#website\",\"url\":\"https:\\\/\\\/inprotech.es\\\/\",\"name\":\"InprOTech\",\"description\":\"The Cybersecurity Solution for the Industrial Environment\",\"potentialAction\":[{\"@type\":\"SearchAction\",\"target\":{\"@type\":\"EntryPoint\",\"urlTemplate\":\"https:\\\/\\\/inprotech.es\\\/?s={search_term_string}\"},\"query-input\":{\"@type\":\"PropertyValueSpecification\",\"valueRequired\":true,\"valueName\":\"search_term_string\"}}],\"inLanguage\":\"en-US\"},{\"@type\":\"Person\",\"@id\":\"https:\\\/\\\/inprotech.es\\\/#\\\/schema\\\/person\\\/cb0ae1292b18b48c1e89b0e4e7ef15d9\",\"name\":\"admin\",\"image\":{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\\\/\\\/secure.gravatar.com\\\/avatar\\\/d903daf71b546605502fd9841b9dc598cc8d3a04ee26680ca18eb3633e5209be?s=96&d=mm&r=g\",\"url\":\"https:\\\/\\\/secure.gravatar.com\\\/avatar\\\/d903daf71b546605502fd9841b9dc598cc8d3a04ee26680ca18eb3633e5209be?s=96&d=mm&r=g\",\"contentUrl\":\"https:\\\/\\\/secure.gravatar.com\\\/avatar\\\/d903daf71b546605502fd9841b9dc598cc8d3a04ee26680ca18eb3633e5209be?s=96&d=mm&r=g\",\"caption\":\"admin\"},\"sameAs\":[\"https:\\\/\\\/inprotech.es\"],\"url\":\"https:\\\/\\\/inprotech.es\\\/en\\\/author\\\/moon\\\/\"}]}<\/script>\n<!-- \/ Yoast SEO plugin. -->","yoast_head_json":{"title":"Success Story in Takasago: UEBA Alerts & Process Mining - InprOTech","description":"Discover how InprOTech Guardian revolutionized Takasago's industrial securityprocesses with advanced anomaly detection through behavior and process mining, enhancing operational excellence and cybersecurity.","robots":{"index":"index","follow":"follow","max-snippet":"max-snippet:-1","max-image-preview":"max-image-preview:large","max-video-preview":"max-video-preview:-1"},"canonical":"https:\/\/inprotech.es\/en\/1541\/","og_locale":"en_US","og_type":"article","og_title":"Success Story in Takasago: UEBA Alerts & Process Mining - InprOTech","og_description":"Discover how InprOTech Guardian revolutionized Takasago's industrial securityprocesses with advanced anomaly detection through behavior and process mining, enhancing operational excellence and cybersecurity.","og_url":"https:\/\/inprotech.es\/en\/1541\/","og_site_name":"InprOTech","article_published_time":"2024-03-07T08:57:42+00:00","article_modified_time":"2025-02-17T11:13:58+00:00","og_image":[{"width":1536,"height":768,"url":"https:\/\/inprotech.es\/wp-content\/uploads\/2024\/02\/proyecto-innotwin-takasago.jpg","type":"image\/jpeg"}],"author":"admin","twitter_card":"summary_large_image","twitter_misc":{"Written by":"admin","Est. reading time":"4 minutes"},"schema":{"@context":"https:\/\/schema.org","@graph":[{"@type":"Article","@id":"https:\/\/inprotech.es\/en\/1541\/#article","isPartOf":{"@id":"https:\/\/inprotech.es\/en\/1541\/"},"author":{"name":"admin","@id":"https:\/\/inprotech.es\/#\/schema\/person\/cb0ae1292b18b48c1e89b0e4e7ef15d9"},"headline":"Success Story in Takasago: UEBA Alerts & Process Mining","datePublished":"2024-03-07T08:57:42+00:00","dateModified":"2025-02-17T11:13:58+00:00","mainEntityOfPage":{"@id":"https:\/\/inprotech.es\/en\/1541\/"},"wordCount":618,"commentCount":0,"image":{"@id":"https:\/\/inprotech.es\/en\/1541\/#primaryimage"},"thumbnailUrl":"https:\/\/inprotech.es\/wp-content\/uploads\/2024\/02\/proyecto-innotwin-takasago.jpg","articleSection":["Success Stories"],"inLanguage":"en-US","potentialAction":[{"@type":"CommentAction","name":"Comment","target":["https:\/\/inprotech.es\/en\/1541\/#respond"]}]},{"@type":"WebPage","@id":"https:\/\/inprotech.es\/en\/1541\/","url":"https:\/\/inprotech.es\/en\/1541\/","name":"Success Story in Takasago: UEBA Alerts & Process Mining - InprOTech","isPartOf":{"@id":"https:\/\/inprotech.es\/#website"},"primaryImageOfPage":{"@id":"https:\/\/inprotech.es\/en\/1541\/#primaryimage"},"image":{"@id":"https:\/\/inprotech.es\/en\/1541\/#primaryimage"},"thumbnailUrl":"https:\/\/inprotech.es\/wp-content\/uploads\/2024\/02\/proyecto-innotwin-takasago.jpg","datePublished":"2024-03-07T08:57:42+00:00","dateModified":"2025-02-17T11:13:58+00:00","author":{"@id":"https:\/\/inprotech.es\/#\/schema\/person\/cb0ae1292b18b48c1e89b0e4e7ef15d9"},"description":"Discover how InprOTech Guardian revolutionized Takasago's industrial securityprocesses with advanced anomaly detection through behavior and process mining, enhancing operational excellence and cybersecurity.","breadcrumb":{"@id":"https:\/\/inprotech.es\/en\/1541\/#breadcrumb"},"inLanguage":"en-US","potentialAction":[{"@type":"ReadAction","target":["https:\/\/inprotech.es\/en\/1541\/"]}]},{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/inprotech.es\/en\/1541\/#primaryimage","url":"https:\/\/inprotech.es\/wp-content\/uploads\/2024\/02\/proyecto-innotwin-takasago.jpg","contentUrl":"https:\/\/inprotech.es\/wp-content\/uploads\/2024\/02\/proyecto-innotwin-takasago.jpg","width":1536,"height":768},{"@type":"BreadcrumbList","@id":"https:\/\/inprotech.es\/en\/1541\/#breadcrumb","itemListElement":[{"@type":"ListItem","position":1,"name":"Portada","item":"https:\/\/inprotech.es\/en\/pagina-de-inicio\/"},{"@type":"ListItem","position":2,"name":"Success Story in Takasago: UEBA Alerts & Process Mining"}]},{"@type":"WebSite","@id":"https:\/\/inprotech.es\/#website","url":"https:\/\/inprotech.es\/","name":"InprOTech","description":"The Cybersecurity Solution for the Industrial Environment","potentialAction":[{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https:\/\/inprotech.es\/?s={search_term_string}"},"query-input":{"@type":"PropertyValueSpecification","valueRequired":true,"valueName":"search_term_string"}}],"inLanguage":"en-US"},{"@type":"Person","@id":"https:\/\/inprotech.es\/#\/schema\/person\/cb0ae1292b18b48c1e89b0e4e7ef15d9","name":"admin","image":{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/secure.gravatar.com\/avatar\/d903daf71b546605502fd9841b9dc598cc8d3a04ee26680ca18eb3633e5209be?s=96&d=mm&r=g","url":"https:\/\/secure.gravatar.com\/avatar\/d903daf71b546605502fd9841b9dc598cc8d3a04ee26680ca18eb3633e5209be?s=96&d=mm&r=g","contentUrl":"https:\/\/secure.gravatar.com\/avatar\/d903daf71b546605502fd9841b9dc598cc8d3a04ee26680ca18eb3633e5209be?s=96&d=mm&r=g","caption":"admin"},"sameAs":["https:\/\/inprotech.es"],"url":"https:\/\/inprotech.es\/en\/author\/moon\/"}]}},"_links":{"self":[{"href":"https:\/\/inprotech.es\/en\/wp-json\/wp\/v2\/posts\/1541","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/inprotech.es\/en\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/inprotech.es\/en\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/inprotech.es\/en\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/inprotech.es\/en\/wp-json\/wp\/v2\/comments?post=1541"}],"version-history":[{"count":2,"href":"https:\/\/inprotech.es\/en\/wp-json\/wp\/v2\/posts\/1541\/revisions"}],"predecessor-version":[{"id":2193,"href":"https:\/\/inprotech.es\/en\/wp-json\/wp\/v2\/posts\/1541\/revisions\/2193"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/inprotech.es\/en\/wp-json\/wp\/v2\/media\/1540"}],"wp:attachment":[{"href":"https:\/\/inprotech.es\/en\/wp-json\/wp\/v2\/media?parent=1541"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/inprotech.es\/en\/wp-json\/wp\/v2\/categories?post=1541"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/inprotech.es\/en\/wp-json\/wp\/v2\/tags?post=1541"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}