Network security attack misdirection on a transport vehicle
AssigneePanasonic Avionics Corporation
InventorsPhilip Watson, Steven Bates
Life of this patent
Estimating the term…
Abstract
A network security attack misdirection line-replaceable unit for installation on an aircraft and connected to an onboard data network include a local network interface to the onboard data network. A local simulation server accepts incoming access requests accompanied by an access credential from an attacker client device, and is responsive thereto with either a simulated access denial response or a simulated access grant response. Delays between receipt of the access request and to the access denial response is progressively increased with each presentation of the access credential.
Claims18
A system for misdirecting network security attacks onboard a vehicle, comprising:
- a local simulated server including a data networking interface connected to a local area network of the vehicle,
- wherein the local simulated server is based onboard the vehicle, and wherein the local simulated server comprises a processor and a memory storing instructions, that when executed by the processor, causes the local simulated server to execute:
- an onboard network service simulator connected to the data networking interface, the onboard network service simulator configured to accept incoming access requests accompanied by an access credential from an attacker client device and being responsive thereto;
- and
- a simulated service user interface configured to accept command inputs corresponding to requests to access a simulated data set upon an acceptance of the access credential;
- and
- a remote simulated server that is ground based, the remote simulated server comprising a processor and a memory storing instructions, that when executed by the processor, causes the remote simulated server to execute:
- a remote network service simulator in communication with the data networking interface, the remote network service simulator configured to accept incoming remote access requests accompanied by a remote access credential from the attacker client device and being responsive thereto with a simulated remote access denial response;
- an access attempt monitor in communication with the onboard network service simulator and the simulated service user interface, the access attempt monitor configured to capture a security breach event for each incoming access request to the onboard network service simulator and the command inputs corresponding to the requests to access the simulated data set;
- and
- a remote monitor in communication with the remote network service simulator, the remote monitor configured to log requests to access a remote simulated data set as remote security breach events.
A method of misdirecting network security attacks onboard a vehicle, comprising:
- accepting, by an onboard network service simulator that is based onboard the vehicle and connected to a data networking interface in communication with a local area network of the vehicle, incoming access requests accompanied by an access credential from an attacker client device;
- accepting, by a simulated service user interface, command inputs corresponding to requests to access a simulated data set upon acceptance of the access credential;
- accepting, by a remote network service simulator that is ground based and connected to the data networking interface, incoming remote access requests accompanied by a remote access credential from the attacker client device and being responsive thereto with a simulated remote access denial response;
- capturing, by an access attempt monitor in communication with the onboard network service simulator and the simulated service user interface, a security breach event for each incoming access request to the onboard network service simulator and the command inputs corresponding to the requests to access the simulated data set;
- and
- logging, by a remote monitor in communication with the remote network service simulator, requests to access a remote simulated data set as remote security breach events.
Dependencies are inferred from the claim text.