Eingebetteter Bedrohungsdetektor

Details

Veröffentlichungs-Nr.

EP3764261

Aktenzeichen

EP20185287

Anmeldetag

10. Juli 2020

Veröffentlichung

5. November 2025

Erteilung

5. November 2025

Rechtsraum

EP

IPC

G06F21/56G06F21/52H04L9/40

Abstract

A method for detecting a threat to an avionics system includes an Embedded Threat Detector (ETD) (100) providing a non-bypassable module which compares run time signatures (124) of each running application with pre-defined database of signatures. Any variation outside of pre-defined bounds implies an existence of malware. The ETD is located in a root Virtual Machine (VM0) and has two modes of operation. A learning mode (110) in a controlled environment generates a database of controlled signatures for each software thread as the software is executed. Conversely, in the run mode (120) during operations, the ETD generates signatures in real time and compares the real time signatures with the controlled signatures. A mismatch exceeding specified limits generates an alert and notifies a user.

Anmelder

Firma

Rockwell Collins, Inc.

Land

🇺🇸 USA

Fachgebiete