System and Method for Developing a Cyber-Attack Scenario

• US 20160285907A1
• Filed: 03/27/2015
• Published: 09/29/2016
• Est. Priority Date: 03/27/2015
• Status: Active Grant

• Current Assignee: The Boeing Co.
• Original Assignee: The Boeing Co.
• Inventors: Nguyen, Daniel, Shelton, Jason W.
• Granted Patent: US 9,712,553 B2
• Time in Patent Office: Days
• US Class Current: 1/1
• CPC Class Codes: B64F 5/60 Testing or inspecting aircraft components or systems
• CPC Class Codes: H04L 63/1433 Vulnerability analysis

Abstract

A cyber-attack scenario simulation system and method may include an aircraft simulator operable to generate an aircraft simulation, a cyber-attack generator operable to generate a cyber-attack simulation, a cyber defense generator operable to generate a cyber defense simulation, a scenario generator operable to generate a cyber-attack scenario including the cyber attack simulation and the cyber defense simulation and launch the cyber-attack scenario against the aircraft simulation, and a cyber-attack scenario analysis tool operable to assess an impact of the cyber-attack scenario on the aircraft simulation.

Claims

1. A cyber-attack scenario simulation system comprising:

an aircraft simulator operable to generate an aircraft simulation;

a cyber-attack generator operable to generate a cyber-attack simulation;

a cyber defense generator operable to generate a cyber defense simulation;

a scenario generator operable to generate a cyber-attack scenario comprising said cyber attack simulation and said cyber defense simulation and launch said cyber-attack scenario against said aircraft simulation; and

a cyber-attack scenario analysis tool operable to assess an impact of said cyber-attack scenario on said aircraft simulation.

2. The system of claim 1 wherein said aircraft simulation comprises a plurality of modules, wherein each module comprises one of a system simulation or a component simulation.

3. The system of claim 2 wherein said aircraft simulator is operable to isolate one module from another module.

4. The system of claim 2 wherein said aircraft simulator is operable to isolate a set of modules from any other module.

5. The system of claim 2 wherein said aircraft simulator is operable to exchange one module with a different module.

6. The system of claim 2 wherein said cyber-attack scenario analysis tool is further operable to identify vulnerabilities in said module.

7. The system of claim 6 wherein:

said cyber-attack generator is further operable to generate a modified cyber-attack simulation in response to identified vulnerabilities in said module,

said cyber defense generator is further operable to generate a modified cyber defense simulation in response to said modified cyber-attack simulation, and

said cyber-attack scenario is repeatable.

8. The system of claim 6 wherein said cyber-attack scenario analysis tool is further operable to assess a pilot response.

9. The system of claim 8 wherein:

said cyber-attack generator is further operable to generate a modified cyber-attack simulation in response to identified vulnerabilities in said module and said pilot response,

said cyber defense generator is further operable to generate a modified cyber defense simulation in response to said modified cyber-attack simulation, and

said cyber-attack scenario is repeatable.

10. A method for developing a cyber-attack scenario simulation, said method comprising:

generating an aircraft simulation;

generating a cyber-attack simulation;

generating a cyber defense simulation;

generating a cyber-attack scenario comprising said cyber-attack simulation and said cyber defense simulation;

launching said cyber-attack scenario against said aircraft simulation; and

assessing an impact of said cyber-attack scenario on said aircraft simulation and a pilot response.

11. The method of claim 10 further comprising isolating one of an aircraft system simulation or an aircraft component simulation of said aircraft simulation.

12. The method of claim 10 further comprising exchanging one of an aircraft system simulation or an aircraft component simulation of said aircraft simulation with one of a different aircraft system simulation or a different aircraft component simulation.

13. The method of claim 10 further comprising identifying a vulnerability in said aircraft simulation, wherein said vulnerability is exploitable by said cyber-attack simulation.

14. The method of claim 10 further comprising:

generating a modified cyber-attack simulation;

generating a modified cyber defense simulation;

generating a modified cyber-attack scenario comprising said modified cyber-attack simulation and said modified cyber defense simulation; and

launching said modified cyber-attack scenario against said aircraft simulation.

15. The method of claim 14 further comprising:

assessing an impact of said modified cyber-attack scenario on said aircraft simulation and said pilot response; and

evaluating an assessed modified cyber-attack scenario compared to an assessed cyber-attack scenario.

16. A computer program product for developing a cyber-attack scenario simulation, said computer program product comprising:

a non-transitory computer readable medium; and

program code, stored on said non-transitory computer readable medium, for;

generating an aircraft simulation;

generating a cyber-attack simulation;

generating a cyber defense simulation;

generating a cyber-attack scenario comprising said cyber-attack simulation and said cyber defense simulation;

launching said cyber-attack scenario against said aircraft simulation; and

assessing an impact of said cyber-attack scenario on said aircraft simulation and a pilot response.

17. The computer program product of claim 16 wherein said aircraft simulation comprises a plurality of modules, and wherein each module comprises one of a system simulation or a component simulation.

18. The computer program product of claim 17 wherein one module is isolated from any other module.

19. The computer program product of claim 17 wherein one module is exchanged with a different module.

20. The computer program product of claim 16 comprising further program code, stored on said non-transitory computer readable medium, for:

generating a modified cyber-attack simulation;

generating a modified cyber defense simulation;

generating a modified cyber-attack scenario comprising said modified cyber-attack simulation and said modified cyber defense simulation;

launching said modified cyber-attack scenario against said aircraft simulation; and

assessing an impact of said modified cyber-attack scenario on said aircraft simulation and said pilot response.