Mechanical measures
- Make sure that any KNX related cabling is inaccessible
- Keep distribution boards locked
- Protect devices against dismounting
On the live bus
- Record & analyze bus traffic
- Block unicast and broadcast communication across couplers
For more information see the 'Communication Protocol' and 'Network Configuration' sections
- Read out download counters (PID_Download_Counter)
- Track possible abuse based on the Individual Address of a device by validating the PID_Device_Control (e.g user program is stopped)
Configuration of plain devices
- Couplers: check filter tables
- Use the BCU key feature