System and method for developing a cyber-attack scenario

Patent metadata

Field	Value
Publication number	US-9712553-B2
Application number	US-201514671557-A
Country	US
Kind code	B2
Filing date	Mar 27, 2015
Priority date	Mar 27, 2015
Publication date	Jul 18, 2017
Grant date	Jul 18, 2017

Abstract

A cyber-attack scenario simulation system and method may include an aircraft simulator operable to generate an aircraft simulation, a cyber-attack generator operable to generate a cyber-attack simulation, a cyber defense generator operable to generate a cyber defense simulation, a scenario generator operable to generate a cyber-attack scenario including the cyber attack simulation and the cyber defense simulation and launch the cyber-attack scenario against the aircraft simulation, and a cyber-attack scenario analysis tool operable to assess an impact of the cyber-attack scenario on the aircraft simulation.

First claim

What is claimed is:

1. A cyber-attack scenario simulation system comprising:
a hardware processor;
an aircraft simulator operable to generate an aircraft simulation, said aircraft simulation comprising a plurality of modules, wherein said aircraft simulator is operable to isolate one module from another module;
a cyber-attack generator operable to generate a cyber-attack simulation;
a cyber defense generator operable to generate a cyber defense simulation;
a scenario generator operable to generate a cyber-attack scenario comprising said cyber attack simulation and said cyber defense simulation and launch said cyber-attack scenario against said aircraft simulation;
a flight simulator operable to generate a flight simulation based on said aircraft simulation and said cyber-attack scenario;
a display to display said flight simulation to a pilot interfacing with said flight simulator;
a cyber-attack scenario analysis tool operable to assess an impact of said cyber-attack scenario on said aircraft simulation as a whole and on isolated ones of said plurality of modules; and
a sensor system configured to determine a reaction of said pilot while interfacing with said flight simulator following launch of said cyber-attack scenario, and wherein said cyber-attack scenario analysis tool is further operable to assess a pilot response.

2. The system of claim 1 wherein each module represents one of a system simulation or a component simulation.

3. The system of claim 1 wherein said aircraft simulator is further operable to isolate a set of modules from any other module, and wherein a cyber-attack scenario analysis tool is further operable to assess said impact of said cyber-attack scenario on said set of modules.

4. The system of claim 1 wherein said aircraft simulator is further operable to exchange at least one module with a different module, and wherein a cyber-attack scenario analysis tool is further operable to assess said impact of said cyber-attack scenario on said aircraft simulation as a whole and said different module.

5. The system of claim 1 wherein said cyber-attack scenario analysis tool is further operable to identify vulnerabilities in at least one of said plurality of modules.

6. The system of claim 5 wherein:
said cyber-attack generator is further operable to generate a modified cyber-attack simulation in response to identified vulnerabilities in at least one of said plurality of modules,
said cyber defense generator is further operable to generate a modified cyber defense simulation in response to said modified cyber-attack simulation, and
said cyber-attack scenario is repeatable.

7. The system of claim 1 wherein:
said cyber-attack generator is further operable to generate a modified cyber-attack simulation in response to identified vulnerabilities in said pilot response,
said cyber defense generator is further operable to generate a modified cyber defense simulation in response to said modified cyber-attack simulation, and
said cyber-attack scenario is repeatable.

8. The system of claim 1 wherein said cyber-attack simulation comprises an attack vector simulation.

9. A computer implemented method using a hardware processor for developing a cyber-attack scenario simulation, said method comprising:
generating, by said hardware processor, an aircraft simulation comprising a plurality of modules, wherein at least one module is capable of being isolated from at least another module;
generating a cyber-attack simulation;
generating a cyber defense simulation;
generating a cyber-attack scenario comprising said cyber-attack simulation and said cyber defense simulation;
launching said cyber-attack scenario against said aircraft simulation;
generating a flight simulation based on said aircraft simulation and said cyber-attack scenario;
displaying said flight simulation to a pilot interfacing with a flight simulator;
assessing an impact of said cyber-attack scenario on said aircraft simulation as a whole and on isolated ones of said plurality of modules;
generating sensor data representing a pilot response while said pilot is interfacing with said flight simulator following launch of said cyber-attack scenario; and
assessing an impact of said cyber-attack scenario on said pilot response.

10. The method of claim 9 wherein each module represents one of an aircraft system simulation or an aircraft component simulation.

11. The method of claim 9 further comprising:
exchanging at least one module with a different module; and
assessing an impact of said cyber-attack scenario on said aircraft simulation as a whole and said different module.

12. The method of claim 9 further comprising identifying a vulnerability in said aircraft simulation, wherein said vulnerability is exploitable by said cyber-attack simulation.

13. The method of claim 9 further comprising:
generating a modified cyber-attack simulation;
generating a modified cyber defense simulation;
generating a modified cyber-attack scenario comprising said modified cyber-attack simulation and said modified cyber defense simulation;
launching said modified cyber-attack scenario against said aircraft simulation;
assessing an impact of said modified cyber-attack scenario on said aircraft simulation as a whole and on said isolated ones of said plurality of modules; and
evaluating an assessed modified cyber-attack scenario compared to an assessed cyber-attack scenario.

14. The method of claim 9 further comprising assessing an impact of said pilot response on said aircraft simulation.

15. The method of claim 9 wherein said cyber-attack simulation comprises an attack vector simulation.

16. A computer program product for developing a cyber-attack scenario simulation, said computer program product comprising:
a non-transitory computer readable medium; and
program code, stored on said non-transitory computer readable medium, for:
generating an aircraft simulation comprising a plurality of modules, wherein each module represents one of a system simulation or a component simulation, and wherein at least one module is capable of being isolated from at least another module;
generating a cyber-attack simulation;
generating a cyber defense simulation;
generating a cyber-attack scenario comprising said cyber-attack simulation and said cyber defense simulation;
launching said cyber-attack scenario against said aircraft simulation;
generating a flight simulation based on said aircraft simulation and said cyber-attack scenario for display to a pilot interfacing with a flight simulator;
assessing an impact of said cyber-attack scenario on said aircraft simulation as a whole and on isolated ones of said plurality of modules;
processing pilot response data representing a pilot response while said pilot is interfacing with said flight simulator following launch of said cyber-attack scenario; and
assessing an impact of said cyber-attack scenario on said pilot response.

17. The computer program product of claim 16 wherein a set of modules is capable of being isolated from any other module; and comprising further program code, stored on said non-transitory computer readable medium, for:
assessing an impact of said cyber-attack scenario on said aircraft simulation as a whole and on said set of modules.

18. The computer program product of claim 16 wherein at least one module is capable of being exchanged with a different module; and comprising further program code, stored on said non-transitory computer readable medium, for:
assessing an impact of said cyber-at

Assignees

• Boeing Co

Inventors

• Nguyen Daniel
• Shelton Jason W
• Mitchell Timothy M

Classifications

• H04L63/1433 Primary

  Vulnerability analysis · CPC title

• B64F5/60

  Testing or inspecting aircraft components or systems · CPC title