Method of operating a digital system operable in multiple operational states and digital system implementing such method
AssigneeNorthrop Grumman Systems Corporation
InventorEric L. Hendrickson
Life of this patent
Estimating the term…
Abstract
A digital system and a method of operating a digital system wherein the digital system has a digital resource and an event detector detect events of the digital resource. An operational mode of at least one of the system and the digital resource in effect during an interval is determined and a number of events that occur during the interval is accumulated. The accumulated events are compared against at least one threshold associated with the operational mode and action is taken if the comparison indicates an out-of-nominal operation of the digital resource.
Claims20
A method of operating a digital system operable in multiple operational states having a digital resource and an event detector that detects events of the digital resource, the method comprising the steps of:
- (a) determining an operational mode of at least one of the system and the digital resource in effect during an interval;
- (b) accumulating a number of events that occur during the interval;
- (c) comparing accumulated events against at least one threshold associated with the operational mode;
- and
- (d) implementing at least one of isolationist, limiting, and corrective action if the comparison indicates an out-of-nominal operation of the digital resource;
- wherein the digital system has a plurality of further event detectors that detect a plurality of further events, and including the further steps of (e) accumulating further events, (f) weighting accumulated events, (g) summing accumulated and weighted events to obtain an event sum, (h) comparing the event sum to at least one threshold, and (i) incrementing the event sum if the event sum varies from at least one threshold.
(canceled)
(canceled)
A digital system operable in multiple operational states, comprising:
- a digital resource;
- an event detector that detects events of the digital resource;
- a security matrix having at least one event counter that accumulates a number of events of the digital resource that occur as the digital system is operating in a particular operational state during a time interval wherein the security matrix compares accumulated events against at least one threshold associated with the particular operational state to obtain a risk score value;
- and
- a threat evaluation module implementing at least one of isolationist, limiting, and corrective action if the risk score value indicates an out-of-nominal operation of the digital resource;
- wherein the digital system has a plurality of further event detectors that detect a plurality of further hardware events, and wherein the security matrix is further operable to accumulate further hardware events, weighting accumulated hardware events, and summing accumulated and weighted hardware events to obtain an event sum;
- and
- wherein the security matrix is further operable to compare the event sum to at least one threshold and incrementing the event sum if the event sum varies from at least one threshold.
(canceled)
(canceled)
A digital system operable in multiple operational states, comprising:
- a digital resource;
- means for detecting events of the digital resource;
- means having at least one event counter for accumulating a number of events of the digital resource that occur as the digital system is operating in a particular operational state during a time interval and including means for comparing accumulated events against at least one threshold associated with the particular operational state to obtain a risk score value;
- and
- means for implementing at least one of isolationist, limiting, and corrective action if the risk score value indicates an out-of-nominal operation of the digital resource;
- wherein the detecting means detect a plurality of further hardware events, and wherein the accumulating means accumulates further hardware events and includes means for weighting accumulated hardware events and means for summing accumulated and weighted hardware events to obtain an event sum;
- and
- wherein the accumulating means further includes means for comparing the event sum to at least one threshold and means for incrementing the event sum if the event sum varies from at least one threshold.
(canceled)
(canceled)
Dependencies are inferred from the claim text.