The Scadvance XP® system detects devices connected to the protected network on the basis of observed traffic. In this way, a map of the protected network is created in the form of a graph of connections between network devices at the level of network logic devices.