Cyber defense
AssigneeCyberg Control Ltd.
InventorOfir Hason
Life of this patent
Estimating the term…
Abstract
Some embodiments are directed to a simulation facility that includes an operational physical model facility of a real infrastructure facility that mimics at least in part operations of the real infrastructure facility and comprises equipment that corresponds to and mimics operations of equipment in the real infrastructure facility; attack toolware for use by people in mounting cyber attacks on the model facility; operations and management toolware for use by people in operating and defending the model facility against cyber attacks mounted using the attack toolware; and a controller having a memory and operable to acquire and store in the memory a forensic record of cyber attacks mounted on the model facility and defense strategies undertaken to defend the model facility against the cyber attacks.
Claims20
A simulation facility comprising:
- an operational model facility of a real infrastructure facility that mimics at least in part operations of the real infrastructure facility and includes non-information-technology equipment that corresponds to and mimics operations of equipment in the real infrastructure facility;
- attack toolware for use by a first team of people in mounting cyber attacks on the model facility;
- operations and management toolware for use by a second team of people in operating the model facility and in defending the model facility against the cyber attacks mounted by the first team of people using the attack toolware;
- and
- a controller having a memory and operable to acquire, and to store in the memory a forensic record of cyber attacks mounted by the first team of people on the model facility that includes the non-information-technology equipment, and of defense strategies undertaken by the second team of people to defend the model facility against the cyber attacks, wherein the forensic record comprises data indicative of interactions among the second team of people and of physiological features of the second team.
A method of developing a strategy to defend one of a model facility of a real facility and a real facility against cyber attack, the method comprising:
- providing a simulation facility, the simulation facility comprising
- the model facility that mimics at least in part operations of the real facility and includes non-information-technology equipment that corresponds to and mimics operations of equipment in the real facility,
- attack toolware for use by a first team of people in mounting cyber attacks on the model facility,
- operations and management toolware for use by a second team of people in operating the model facility and in defending the model facility against the cyber attacks mounted by the first team of people using the attack toolware, and
- a controller having a memory and operable to acquire and store in the memory, a forensic record of cyber attacks mounted by the first team of people on the model facility that includes the non-information-technology equipment, and of defense strategies undertaken by the second team of people to defend the model facility against the cyber attacks, wherein the forensic record comprises data indicative of interactions among the second team of people and of physiological features of the second team;
- the method further comprising
- acquiring at the controller the forensic record responsive to people of the first team using the attack toolware to mount cyber attacks on the model facility and people of the second team using the operations and management toolware to defend against cyber attacks on the model facility and to maintain the operation of the simulation facility;
- and
- processing by the controller data in the forensic record to generate a defense strategy for use of people to defend the one of the model facility and the real facility against cyber attacks.
Dependencies are inferred from the claim text.