1. A system for detecting and correcting industrial network security issues, comprising: a pattern monitoring component configured to monitor data traffic on the industrial network during a training period; a pattern analysis component configured to generate at least one learned profile characterizing at least one learned pattern of data traffic determined based on data traffic information collected by the pattern monitoring component during the training period; and a comparison analyzer configured to detect a deviation of a current pattern of data traffic from the at least one learned pattern of data traffic in excess of a threshold subsequent to the training period, and to initiate one or more automated countermeasures in response to detecting the deviation.