ATMS Integrity Monitoring for Real-Time Cyber Attack Detection
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Existing air traffic management systems (ATMS) are vulnerable to cyber-attacks due to lack of encryption and authentication, which can compromise data integrity and affect real-time air traffic monitoring, and existing security measures either introduce delays or are insufficient to prevent unauthorized access.
Innovation Solution
An ATMS monitor with sub-monitors to detect altered, delayed, or absent data packets, compromised routers, and unauthorized network access by hashing data packets and router firmware, and using signature-based intrusion detection to generate alerts.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If encryption and authentication are implemented in the ATMS, then security against cyber-attacks is improved, but processing delays increase and real-time operation is adversely affected
Solution Approach 1:
The system divides security monitoring into separate sub-monitors that independently check different aspects (data packet integrity, router firmware integrity, network access patterns) without requiring centralized encryption/decryption processing, thereby maintaining real-time performance while improving security
Solution Approach 2:
The patent introduces hash functions as intermediaries to verify data integrity. Instead of using complex encryption/decryption processes, the system uses lightweight hash comparisons to detect tampering, significantly reducing processing delays while maintaining security
2Productivity
If simple data transmission without encryption is used, then real-time operation is maintained, but vulnerability to cyber-attacks increases
Solution Approach 1:
The system performs preliminary integrity checks by generating and storing hash values of data packets, router firmware, and network access patterns before potential attacks occur. This allows the system to detect and respond to cyber-attacks in real-time without requiring complex encryption during normal operation
Solution Approach 2:
The monitor continuously compares current data packets, firmware states, and network access patterns against their expected hash values, providing real-time feedback on system integrity. When discrepancies are detected, the system can immediately alert operators or take corrective actions
Data Source
Figure 1
Figure 2
Figure 3
AI summary
An air traffic management system monitor is provided, wherein the monitor comprises a first sub-monitor configured to monitor a data packet within the ATMS, and provide a first alert if the data packet in the ATMS is at least one of: altered; delayed; and absent. This allows detection of a compromised data packed in the ATMS.