Security system for machine to machine cyber attack detection and prevention

An embedded security bridge system (SBS) for machine to machine (M2M) communication cyber-attack detection and prevention, comprising:

• a. one or more M2M module in communication with at least one remote machine, the M2M module configured for enabling communication between at least one remote machine and at least one proximal machine;
• b. at least one embedded security bridge (ESB) the ESB operatively connected to:
• i. the at least one proximal machine;
• and,
• ii. at least one M2M module,
• wherein the communication between the at least one remote machine and the at least one proximal machine is conducted through the ESB communicatively positioned between the M2M module and the at least one proximal machine,
• the ESB comprises:
• i. one or more inspection units, comprising at least one hardware processor executing code, the code comprising code instructions for:
• a. actively interrogating the M2M module for at least one characteristic of a serving network environment used by said M2M module, said at least one characteristic is a member of a group consisting of communication protocols used, frequencies used, type of data transferal over said frequencies and signal properties,
• b. analyzing the communication for at least verifying the at least one characteristic of said serving network environment, and
• c. identifying communication and/or content suspicious as malicious;
• and,
• ii. one or more decision units operatively connected to the inspection unit, the decision unit comprising at least one hardware processor executing code, the code comprising code instructions for performing at least one action based on the analysis of at least one the inspection unit;
• wherein the M2M module is configured to enable communication between the at least one proximal machine and the at least one remote machine through the ESB;
• further wherein the ESB is configured to detect by means of the inspection unit and prevent by means of the decision unit cyber-attacks on said proximal machine, and wherein the ESB is further configured to detect, by means of the inspection unit, and prevent, by means of the decision unit, cyber-attacks on the remote machine;
• and
• wherein the at least one action comprising at least one of:
• a. blocking at least a portion of the communication;
• and
• b. altering at least a portion of the content and/or at least a portion of at least one communication packet before relaying it to the at least one remote machine or to the at least one proximal machine.

A method for machine to machine (M2M) communication cyber-attack detection and prevention, the method characterized by the following steps:

• a. providing at least one embedded security bridge (ESB), useful for machine to machine (M2M) communication cyber-attack detection and prevention, the ESB operatively connected to:
• i. at least one proximal machine;
• and,
• ii. at least one M2M module, the M2M is further in communication with at least one remote machine, the at least one M2M module is configured to enable communication between the at least one remote machine and the at least one proximal machine;
• wherein the communication between the at least one remote machine and the at least one proximal machine is conducted through the ESB communicatively positioned between the M2M module and the at least one proximal machine,
• the ESB comprising:
• i. one or more inspection units comprising at least one hardware processor executing code, the code comprising code instructions for:
• a. actively interrogating the one or more M2M module for at least one characteristic of a serving network environment used by said one or more M2M module, said at least one characteristic is a member of a group consisting of communication protocols used, frequencies used, type of data transferal over said frequencies and signal properties,
• b. analyzing the communication between the at least one remote machine and the at least one proximal machine for at least verifying the at least one characteristic of said serving network environment, and
• c. identifying communication and/or content suspicious as malicious and directed towards the at least one remote machine and for identifying communication and/or content suspicious as malicious and directed towards the at least one proximal machine;
• and,
• ii. one or more decision units operatively connected to the inspection unit, said decision unit comprising at least one hardware processor executing code, the code comprising code instructions for performing at least one action based on said analysis of at least one said inspection unit;
• b. receiving communication originating from the proximal machine or the remote machine through the ESB;
• c. analyzing the communication by the inspection unit for identifying communication and/or content suspicious as malicious;
• and,
• d. performing at least one action by the decision unit based on the analysis of the communication and/or content by the inspection unit;
• wherein the at least one action comprising at least one of:
• a. blocking at least a portion of the communication;
• and
• b. altering at least a portion of the content and/or at least a portion of at least one communication packet before relaying it to the at least one remote machine or to the at least one proximal machine.