Cybersecurity System with Nested Layers for Cross-Domain Threat Detection

Resolve Bottlenecks,
Find Innovative Solutions
Generate Solutions

Solution Overview

Problem

Current cybersecurity systems are inadequate in detecting and mitigating complex cyber threats that involve multiple attack vectors and cross-domain, cross-industry, and cross-asset paths, as they are designed to monitor and report only within specific domains and types of assets, lacking the capability to handle simultaneous, multi-faceted attacks.

Innovation Solution

A cybersecurity system with a goal-oriented architecture that includes a sublayer for forensic analysis, an overlayer for cross-environment monitoring and data correlation, and a Complex Adaptive Systems (CAS) algorithm for predicting and responding to cyber threats, utilizing bidirectional connection modules to facilitate feedback loops and insights across interconnected layers.

Engineering Contradictions & Design Principles

VSEngineering Contradiction Analysis

1Adaptability or versatility

If existing cyber security tools are deployed to monitor and detect threats, then they can identify and report on attack vectors within their specific monitored domain, but they cannot detect complex attack vectors that cross multiple domains, industries, and asset types

Engineering Contradiction:
Improvecapability to detect cross-domain attack vectorsVSAvoidsystem architecture complexity
Core Design Contradiction:
Adaptability or versatilityVSDevice complexity

Solution Approach 1:

The patent creates a universal cyber security system that performs multiple functions: monitoring individual domains, correlating cross-domain data, detecting complex attack vectors, and providing coordinated response. The system integrates threat intelligence gathering, analysis, and response capabilities into a single multi-functional platform that can handle both simple and complex threats across diverse environments.

Inventive Principle:
Principle #6Universality (Multi-functionality)

Solution Approach 2:

The system implements a nested architecture where multiple layers of security monitoring and analysis are embedded within each other. Individual domain monitors are nested within a broader correlation engine, which is itself nested within the overall complex attack detection framework. This nested structure allows the system to maintain detailed domain-specific monitoring while simultaneously detecting patterns across multiple domains.

Inventive Principle:
Principle #7Nested doll (Nesting)

2Adaptability or versatility

If cyber security systems monitor multiple domains and assets to detect complex threats, then they can identify cross-industry attack vectors, but they lose the specialized focus and detection precision within individual domains

Engineering Contradiction:
Improvecross-domain monitoring capabilityVSAvoidthreat detection precision
Core Design Contradiction:
Adaptability or versatilityVSMeasurement precision

Solution Approach 1:

The system segments the monitoring function into specialized domain-specific monitors that maintain deep expertise in their respective areas (network security, endpoint protection, cloud security, etc.). Each segment operates independently with high precision for its specific domain while contributing data to the overall correlation engine that detects cross-domain patterns.

Inventive Principle:
Principle #1Segmentation

Solution Approach 2:

The patent introduces a correlation engine as an intermediary layer between specialized domain monitors and the overall threat detection system. This intermediary correlates data from multiple domains, identifies patterns indicating complex attacks, and coordinates responses without compromising the specialized detection capabilities of individual domain monitors.

Inventive Principle:
Principle #24Intermediary (Mediator)

3Reliability

If cyber security tools are designed with specialized functions for specific threats, then they can effectively mitigate those identified threats, but they cannot handle simultaneous multi-faceted attacks across different vectors

Engineering Contradiction:
Improvethreat mitigation effectivenessVSAvoidability to handle complex multi-vector attacks
Core Design Contradiction:
ReliabilityVSAdaptability or versatility

Solution Approach 1:

The system merges multiple specialized security tools and functions into a unified platform that maintains the reliability of individual specialized tools while adding the versatility to handle complex multi-vector attacks. The integration combines threat intelligence gathering, analysis, correlation, and response capabilities into a coordinated system that can simultaneously address multiple attack vectors.

Inventive Principle:
Principle #5Merging (Combining)

Solution Approach 2:

The system implements dynamic adaptation where monitoring and response capabilities can be adjusted in real-time based on the nature and complexity of detected threats. The system dynamically allocates resources, adjusts monitoring intensity, and coordinates responses across different domains based on the specific attack scenario being detected.

Inventive Principle:
Principle #15Dynamics

Data Source

PatentEP3151153B1Cyber security system with differentiated capacity to deal with complex cyber attacks
Publication Date: 2021.05.19 THE BOEING CO
  • EP3151153B1 patent drawingFigure 1
  • EP3151153B1 patent drawingFigure 2
  • EP3151153B1 patent drawingFigure 3

AI summary

An improved cyber security protection system with differentiated capacity to deal with complex cyber attacks in complex, highly-connected industries. The system architecture is goal-oriented and separates security goals and concerns by layers that are assigned specific functions to address only those goals. The functions operate concurrently within the layers and provide insight on their respective layers. The layers are interconnected with connection modules using bidirectional interfacing to establish a feedback look within the entire system. Complex adaptive systems (CAS) algorithms are used to identify the probably threats to the system.