Back to results
US 2020/0026860 A1Published application
Combined Analytical Tools for Electronic Warfare and Cybersecurity Testing in Embedded Systems
OwnerHal A Aldridge, John T. Orrinventors
Life of this patent
Estimating the term…
Abstract
A system and method for testing for software vulnerabilities within components installed within a compartmentalized testing environment is presented herein. The system allows software code to be run within a software simulation environment, providing representative signals, whether Radio Frequency, microwave, or other portions of the electromagnetic spectrum, to test signals to the component under test while its execution is monitored and controlled within the compartmentalized testing environment. The system and method is particularly effective for searching for and identifying vulnerabilities to combined Cyber/Electronic Warfare attacks.
Claims16
A system to test for component vulnerabilities comprising:
- instantiating a controlled execution testing environment;
- installing at least one component system within said controlled execution testing environment;
- generating a malicious signal and transmitting said malicious signal to the at least one component system to test performance of the at least one component system;
- monitoring performance of said at least one component system during said test;
- collecting performance data from said test and transmitting the performance data as feedback to a simulation manager;
- analyzing the performance data at the simulation manager of said at least one component system to discover performance data that is inconsistent with expected performance of the at least one component system, where analyzing the performance data further comprises combined computation and signal feedback analysis to identify vulnerabilities;
- providing an indication of identified vulnerabilities and said malicious signal that generated the identified vulnerabilities to one or more users.
4 more elements
A method of testing for component vulnerabilities, comprising:
- instantiating a controlled execution testing environment;
- installing at least one component system within said controlled execution testing environment;
- providing adaptive signal control parameters from a simulation manager to a malicious signal generation module;
- generating a malicious signal utilizing said adaptive signal control parameters and transmitting the generated malicious signal to test said at least one component system;
- collecting signal data and execution data from said test and transmitting the signal data and execution data as feedback to a simulation manager;
- analyzing the data provided as feedback at the simulation manager of said at least one component system to discover performance that is inconsistent with expected performance of the at least one component system;
- providing an indication of identified vulnerabilities and said malicious signal that generated the identified vulnerabilities to one or more users.
4 more elements
A method of testing for component vulnerabilities, comprising:
- instantiating a controlled execution testing environment;
- installing at least one component system within said controlled execution testing environment;
- performing a search for a malicious signal to be applied to the at least one component system comprising the steps of:
- receiving a set of parameters from a vulnerability search tool component at a simulation manager;
- the simulation manager operative to control the controlled execution testing environment and transmit said set of parameters to a malicious signal generator module;
- generating a malicious signal utilizing said adaptive signal control parameters and transmitting the generated malicious signal to test said at least one component system;
- collecting signal data and execution data from said test and transmitting the signal data and execution data as feedback to said simulation manager and said vulnerability search tool;
- analyzing the signal data and execution data at the simulation manager of said at least one component system to discover performance data that is inconsistent with expected performance of the at least one component system;
- storing in a digital storage device all signal data, execution data, and analysis data generated from said signal data and execution data;
- if search regimen is not completed return to receiving step;
- retrieving analysis data from said digital electronic storage device and providing an indication of identified vulnerabilities collected in said analysis data and the generated malicious signal that identified any vulnerabilities to one or more users.
8 more elements
A method of testing for component vulnerabilities, comprising:
- instantiating a controlled execution testing environment;
- installing at least one component system within said controlled execution testing environment;
- identifying a signal composition that exercises a known vulnerability in the at least one component system;
- receiving said signal composition at a vulnerability search tool component and a simulation manager component;
- modifying said signal composition at said simulation manager utilizing parameters provided from said vulnerability search tool component;
- transmitting the modified signal composition to a malicious signal generator for creation of a modified signal;
- transmitting the modified signal to the controlled execution testing environment and applying the modified signal to the at least one component system under test;
- collecting execution data and signal data from the at least one component system under test at a component monitor module;
- providing an indication of identified vulnerabilities and said modified signal that generated the identified vulnerabilities to one or more users.
6 more elements
Dependencies are inferred from the claim text.