Defensiv modul. Risker: obehörig publisher/subscriber, konfigurationsmanipulation, multicast-flooding, tidsmanipulation, enhetskompromiss. Alla labs: detect, contain, verify, restore.