Cybersecurity Anomaly Detection via Digital Twin Simulation
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
The interconnection of aircraft systems in aviation environments increases the risk of cybersecurity threats, and detecting hidden threats and maligned payloads in networked systems is challenging due to the use of General Purpose Computing hardware and commercial software, which also adds weight and costs, limiting the use of hardware redundancy.
Innovation Solution
A system that includes a computer processor programmed to execute a real-time simulation model of a remote computer platform, comparing its outputs to actual communications to detect anomalies and potential cybersecurity threats, without requiring additional hardware or software on the remote system.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If hardware-based redundancy is used to reduce cybersecurity risks, then reliability is improved, but weight increases
Solution Approach 1:
The patent creates a virtual copy (digital twin) of the aircraft system that replicates its behavior and state. This virtual model serves as a redundant security layer without adding physical hardware weight, allowing security verification through simulation and comparison of the virtual versus actual system states.
Solution Approach 2:
The patent introduces a ground-based simulation system as an intermediary between the physical aircraft systems and security monitoring. This intermediary performs redundancy checks and threat detection through virtual modeling, eliminating the need for duplicate physical hardware while maintaining security reliability.
2Reliability
If additional hardware is added for security redundancy, then cybersecurity protection is improved, but cost increases
Solution Approach 1:
The patent uses software-based virtual copying instead of physical hardware duplication. The digital twin creates a computational replica of aircraft systems that provides security redundancy at minimal cost, avoiding the expensive manufacturing and integration of additional physical security hardware.
Solution Approach 2:
The patent replaces mechanical/hardware-based redundancy systems with software-based simulation and virtual modeling. This substitution eliminates the need for physical redundant hardware components, significantly reducing manufacturing costs while maintaining security functionality.
3Productivity
If the aircraft system is networked for improved operational efficiency, then productivity is improved, but vulnerability to cybersecurity attacks increases
Solution Approach 1:
The patent implements continuous feedback loops where the ground-based simulation system constantly monitors and compares virtual system states against actual aircraft data. This real-time feedback mechanism detects anomalies and potential cyber threats while allowing the networked system to maintain its operational efficiency.
Solution Approach 2:
The patent introduces a ground-based monitoring system as an intermediary layer between networked aircraft systems and potential cyber threats. This intermediary provides security verification and threat detection without interfering with the operational communications and data flow of the networked aircraft systems.
Data Source
AI summary
A system for detecting anomalies is provided. The system includes a computer system including at least one processor in communication with at least one memory device. The computer system receives communications from a remote computer platform. The at least one processor is programmed to execute real-time a simulation model of the remote computer platform. The simulation model simulates inputs and outputs of the remote computer platform based on real-time data. The at least one processor is also programmed to receive one or more outbound communications transmitted from the remote computer platform, generate one or more outputs of the simulation model, compare the one or more outbound communications transmitted from the remote computer platform to the one or more outputs of the simulation model, detect one or more differences based on the comparison, and generate an output based on the one or more differences.