Air traffic management system monitor 201 comprises a first sub-monitor (301,Fig.3) for monitoring a data packet (e.g. radar surveillance data) and providing a first alert if it is altered, delayed or absent. If respective hash values of the data packet obtained from a first and second ATMS site 101, 105 differ, the data packet is determined to have been altered. If time stamps of the data packet differ by a threshold amount, it is determined to have been delayed. If a data packet obtained from the first ATMS site cannot be obtained from the second site, the data packet is determined to be absent. A second sub-monitor (302,Fig.3) may monitor a router (312,Fig.3) within the ATMS and provide a second alert if the router (e.g. a hash of the router’s firmware) has been altered. A third sub-monitor (303,Fig.3) may monitor an endpoint within the ATMS and provide a third alert if a network attack is detected. A high priority alert may be generated if the three alerts occur simultaneously.
An air traffic management system monitor
2023-04-26
Patent
Elektronische Ressource
Englisch
IPC: | G06F ELECTRIC DIGITAL DATA PROCESSING , Elektrische digitale Datenverarbeitung / G08G Anlagen zur Steuerung, Regelung oder Überwachung des Verkehrs , TRAFFIC CONTROL SYSTEMS / H04L TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION , Übertragung digitaler Information, z.B. Telegrafieverkehr |
NTRS | 1992
NTIS | 1995
NTRS | 1995
NTIS | 1973
|