AIR-BASED AND GROUND-BASED SECURITY INFORMATION AND EVENT MANAGEMENT SYSTEM

摘要

A system, method, and computer readable media for detecting and mitigating the effects of a cyber event on an aircraft's network including an air-based security module and a ground-based security module that monitor the aircraft's networks and detect cyber events. A collaboration module facilitates communications between the air-based security module and the ground-based security module, and also switches the communications between the modules to an alternate, secure channel when a cyber event is detected. A simulation module that is independent from, but functionally substantially equivalent to, the air-based security module simulates network events that are detected on board the aircraft while the aircraft is in flight. A cyber agent module mitigates the effect of a cyber event on the aircraft's network while the aircraft is in flight based on information from the simulation module that is communicated by the ground-based security module to the air-based security via the collaboration module.

主权项

1. A system for detecting and mitigating the effects of a cyber event on an aircraft's network comprising:
an air-based security information and management module that monitors the aircraft's networks and detects cyber events; a ground-based security information and management module that monitors the aircraft's networks and detects cyber events; a collaboration module that facilitates communications between the air-based security information and management module and the ground-based security information and management module, the collaboration module dynamically switching the communications to an alternate, secure channel when a cyber event is detected; a simulation module that is independent from, but functionally substantially equivalent to, the air-based security information and management module, and simulates network events that are detected on board the aircraft while the aircraft is in flight; and a cyber agent module that mitigates the effect of a cyber event on the aircraft's network while the aircraft is in flight based on information from the simulation module that is communicated by the ground-based security information and management module to the air-based security information and management module via the collaboration module.