System and Method for Developing a Cyber-Attack Scenario

Patent metadata

Field	Value
Publication number	US-2016285907-A1
Application number	US-201514671557-A
Country	US
Kind code	A1
Filing date	Mar 27, 2015
Priority date	Mar 27, 2015
Publication date	Sep 29, 2016
Grant date	—

Abstract

A cyber-attack scenario simulation system and method may include an aircraft simulator operable to generate an aircraft simulation, a cyber-attack generator operable to generate a cyber-attack simulation, a cyber defense generator operable to generate a cyber defense simulation, a scenario generator operable to generate a cyber-attack scenario including the cyber attack simulation and the cyber defense simulation and launch the cyber-attack scenario against the aircraft simulation, and a cyber-attack scenario analysis tool operable to assess an impact of the cyber-attack scenario on the aircraft simulation.

First claim

What is claimed is:

1 . A cyber-attack scenario simulation system comprising:
an aircraft simulator operable to generate an aircraft simulation; a cyber-attack generator operable to generate a cyber-attack simulation; a cyber defense generator operable to generate a cyber defense simulation; a scenario generator operable to generate a cyber-attack scenario comprising said cyber attack simulation and said cyber defense simulation and launch said cyber-attack scenario against said aircraft simulation; and a cyber-attack scenario analysis tool operable to assess an impact of said cyber-attack scenario on said aircraft simulation.

2 . The system of claim 1 wherein said aircraft simulation comprises a plurality of modules, wherein each module comprises one of a system simulation or a component simulation.

3 . The system of claim 2 wherein said aircraft simulator is operable to isolate one module from another module.

4 . The system of claim 2 wherein said aircraft simulator is operable to isolate a set of modules from any other module.

5 . The system of claim 2 wherein said aircraft simulator is operable to exchange one module with a different module.

6 . The system of claim 2 wherein said cyber-attack scenario analysis tool is further operable to identify vulnerabilities in said module.

7 . The system of claim 6 wherein:
said cyber-attack generator is further operable to generate a modified cyber-attack simulation in response to identified vulnerabilities in said module,
said cyber defense generator is further operable to generate a modified cyber defense simulation in response to said modified cyber-attack simulation, and
said cyber-attack scenario is repeatable.

8 . The system of claim 6 wherein said cyber-attack scenario analysis tool is further operable to assess a pilot response.

9 . The system of claim 8 wherein:
said cyber-attack generator is further operable to generate a modified cyber-attack simulation in response to identified vulnerabilities in said module and said pilot response,
said cyber defense generator is further operable to generate a modified cyber defense simulation in response to said modified cyber-attack simulation, and
said cyber-attack scenario is repeatable.

10 . A method for developing a cyber-attack scenario simulation, said method comprising:
generating an aircraft simulation; generating a cyber-attack simulation; generating a cyber defense simulation; generating a cyber-attack scenario comprising said cyber-attack simulation and said cyber defense simulation; launching said cyber-attack scenario against said aircraft simulation; and assessing an impact of said cyber-attack scenario on said aircraft simulation and a pilot response.

11 . The method of claim 10 further comprising isolating one of an aircraft system simulation or an aircraft component simulation of said aircraft simulation.

12 . The method of claim 10 further comprising exchanging one of an aircraft system simulation or an aircraft component simulation of said aircraft simulation with one of a different aircraft system simulation or a different aircraft component simulation.

13 . The method of claim 10 further comprising identifying a vulnerability in said aircraft simulation, wherein said vulnerability is exploitable by said cyber-attack simulation.

14 . The method of claim 10 further comprising:
generating a modified cyber-attack simulation;
generating a modified cyber defense simulation;
generating a modified cyber-attack scenario comprising said modified cyber-attack simulation and said modified cyber defense simulation; and
launching said modified cyber-attack scenario against said aircraft simulation.

15 . The method of claim 14 further comprising:
assessing an impact of said modified cyber-attack scenario on said aircraft simulation and said pilot response; and
evaluating an assessed modified cyber-attack scenario compared to an assessed cyber-attack scenario.

16 . A computer program product for developing a cyber-attack scenario simulation, said computer program product comprising:
a non-transitory computer readable medium; and program code, stored on said non-transitory computer readable medium, for:
generating an aircraft simulation;
generating a cyber-attack simulation;
generating a cyber defense simulation;
generating a cyber-attack scenario comprising said cyber-attack simulation and said cyber defense simulation;
launching said cyber-attack scenario against said aircraft simulation; and
assessing an impact of said cyber-attack scenario on said aircraft simulation and a pilot response.

17 . The computer program product of claim 16 wherein said aircraft simulation comprises a plurality of modules, and wherein each module comprises one of a system simulation or a component simulation.

18 . The computer program product of claim 17 wherein one module is isolated from any other module.

19 . The computer program product of claim 17 wherein one module is exchanged with a different module.

20 . The computer program product of claim 16 comprising further program code, stored on said non-transitory computer readable medium, for:
generating a modified cyber-attack simulation;
generating a modified cyber defense simulation;
generating a modified cyber-attack scenario comprising said modified cyber-attack simulation and said modified cyber defense simulation;
launching said modified cyber-attack scenario against said aircraft simulation; and
assessing an impact of said modified cyber-attack scenario on said aircraft simulation and said pilot response.

Assignees

• Boeing Co

Inventors

• Nguyen Daniel
• Shelton Jason W

Classifications

• B64F5/60

  Testing or inspecting aircraft components or systems · CPC title

• H04L63/1433 Primary

  Vulnerability analysis · CPC title