Abstract: A method and associated wireless monitor and data analysis system are provided. The method includes installing one or more of a plurality of wireless monitors at respective locations onboard a complex system on which a wireless system of interest is installed or planned for installation. The method may then include by the plurality of wireless monitors, emulating the wireless system of interest, and recording data related to performance of the wireless system of interest at one or more recorded times over a plurality of operating conditions of the complex system. The method may also include by the plurality of wireless monitors, collecting data including the respective locations of the wireless monitors correlated with respective recorded data and recorded times. In this regard, the collected data for the plurality of wireless monitors may be retrievable for analysis of the wireless system of interest based thereon.

Abstract: A system, method, and apparatus for secure routing based on a degree of trust are disclosed herein. The disclosed method involves assigning a level of trust to at least one network node, and utilizing the level of trust to determine a degree of security of the network node(s). The level of trust of the network node(s) is related to an amount of certainty of the physical location of the network node(s). The amount of certainty is attained from the network node(s) being located in a known secure location, and/or from verification of the physical location of the network node(s) by using satellite geolocation techniques or by using network ping ranging measurements. The method further involves utilizing the level of trust of the network node(s) to determine a degree of trust of at least one path for routing the data, where the path(s) includes at least one of the network nodes.

Abstract: Methods and apparatus for use in identifying cyber-security threats for an aircraft are provided. The method includes storing parts information relating to each hardware and software component used on the aircraft in an aircraft parts database, receiving, by a computing device, a cyber-security threat, and determining, by the computing device, a threat is relevant to the aircraft by comparing the received threats to the stored parts information.

Abstract: A system is described for communication in a tactical network. A gateway is communicatively couplable to one or more tactical nodes and to one or more other gateways. The gateway is programmed to transmit information to and/or receive information from other gateways. Information exchanged includes gateway attributes, link attributes, service availability, and/or data availability. The gateway optionally provides quality of service, distributed persistence, load balancing, and/or transformation services. Services are provided in a modular, service-oriented architecture (SOA) to accommodate the addition of services and/or applications.

Abstract: Methods and systems for use in in analyzing cyber-security threats for an aircraft are described herein. One example method includes generating an interconnection graph for a plurality of interconnected aircraft systems. The interconnection graph includes a plurality of nodes and a plurality of links. The method also includes defining a cost function for a cyber-security threat to traverse each link and defining a requirements function for a cyber-security threat to exploit each node. The method further includes generating a set of threat traversal graphs for each cyber-security threat of a plurality of cyber-security threats.

Abstract: Computer-implemented methods are disclosed for the application of potential field methods in directing agents. A task is assigned for each of a plurality of mobile communication nodes. A dynamic model is assigned for characterizing a behavior of the nodes. Potential fields are applied to the dynamic model to direct movement of each of the nodes such that the nodes each perform the assigned task with the plurality of mobile communications nodes providing a communications network to serve a communications area.

Abstract: Provided are methods, systems, and computer program products for inspecting composite items. Specifically, a method involves analyzing an image of or, more generally, data characterizing condition of a top layer, which is disposed over a bottom layer. The method also involves performing a structural integrity check based on any anomalies detected in the top layer during this analysis as well as based on any anomalies previously detected in the bottom layer. As such, this structural integrity check accounts for characteristics of multiple layers, in some embodiments, all layers applied up to point of this inspection. In addition to the detected anomalies, the structural integrity check may account for previously performed repairs. The structural integrity check may be performed on individual portions of a composite item while, for example, other portions continue receiving a new composite layer, which may be referred to as an inline inspection.

Abstract: Methods, systems, and devices are disclosed to facilitate operation of a network. First network state data descriptive of a first network state is received. The first network data includes network demand associated with nodes of a dynamic network, where the nodes of the dynamic network include at least one movable node. The first network data also includes a node state of each node of the dynamic network. At least one first link is automatically established between two or more nodes of the dynamic network to satisfy at least a portion of the network demand. Link data is generated where the link data is descriptive of node utilization, the at least one first link, and assignment of the portion of the network demand to the at least one first link. One or more changes to the dynamic network are modeled based on the link data to identify a second network state, wherein the second network state satisfies a greater quantity of the network demand than the first network state.

Abstract: An aircraft includes a first electrical connector configured to couple with a first power cable, a first data communication network and a first modem coupled to first electrical connector and first data communication network and is configured to transmit data received at first electrical connector through first power cable to first data communication network and to transmit data from first data communication network to first power cable through first electrical connector. The aircraft additionally includes a second electrical connector configured to couple with a second power cable, a second data communication network and a second modem coupled to second electrical connector and to second data communication network and is configured to transmit data received at second electrical connector through second power cable to second data communication network and to transmit data from second data communication network to second power cable through second electrical connector.

Abstract: Provided are methods and systems for terrestrial data transmission between aircraft and external networks, such as airline networks and/or airport networks. While an aircraft is landed, various data domains may need to be transmitted between the aircraft and such networks using two or more communication channels available to the aircraft. These channels may include wired and/or wireless channels, such as broadband over power line channels, Ethernet channels, Wi-Fi channels, and cellular channels. The available communication channels are allocated to transmit particular data domains based on the security levels of these channels. For example, aircraft control domains may be transmitted using a more secure communication channel than passenger information domains and/or entertainment systems domains. In some embodiments, multiple communication channels may be used to transmit the same domain parsed into multiple transmission packets. The packets are recombined back into the data domain after the transmission.

Abstract: Disclosed herein is a method for executing unprotected mode services in a protected mode computing environment includes initiating a protected mode service that is configured to execute in a protected mode. Further, the method includes verifying an integrity of one or more unprotected mode services configured to execute in an unprotected mode. The one or more unprotected mode services is registered with the protected mode service. The method also includes initiating an unprotected mode service of the one or more unprotected mode services in response to the integrity of the unprotected mode service being verified.

Abstract: In one embodiment, a method to authenticate a claimant comprises receiving, from the claimant, at least one of a set of beam data from a spot beam transmission, comparing the claimed at least one set of beam data to a known valid data set, and authenticating the claimant when a difference between at least one set of beam data and the known valid data set is less than a threshold.

Abstract: A system and method for verifying and/or geolocating network nodes in attenuated environments for cyber and network security applications are disclosed. The system involves an origination network node, a destination network node, and at least one router network node. The origination network node is configured for transmitting a data packet to the destination network node through at least one router network node. The data packet contains a security signature portion, a routing data portion, and a payload data portion. The security signature portion comprises a listing of at least one network node that the data packet travelled through from the origination network node to the destination network node. In addition, the security signature portion comprises geolocation information, identifier information, and timing information for at least one network node in the listing.

Abstract: Systems and methods for trusted mobile communications are described. A network system provisions a mobile client system with a collection of security parameters on a per application basis and a per device basis. The airplane system provides access to the mobile client system based on the established chain of trust without previously having information about the mobile client system even when the mobile client system and the airplane system are offline with respect to the network system.

Abstract: Methods and apparatus for use in identifying abnormal behavior in a control system. Operating events associated with a control system are received, and an actual behavior of the control system is determined based on the received operating events. The actual behavior is compared to expected behavior to determine whether the actual behavior differs from the expected behavior. The expected behavior includes a correlation between a plurality of operating events associated with the control system. The expected behavior is updated based on an indication of whether the actual behavior is abnormal from a user.

Abstract: A method for generating sensor data is presented. A number of wireless power signals is sent to a group of sensor units. A number of wireless data collection signals is sent to the group of sensor units after the number of wireless power signals have been sent to the group of sensor units. Sensor data in a number of wireless response signals is received from the group of sensor units.

Abstract: A system is described for communication in a tactical network. A gateway is communicatively couplable to one or more tactical nodes and to one or more other gateways. The gateway is programmed to transmit information to and/or receive information from other gateways. Information exchanged includes gateway attributes, link attributes, service availability, and/or data availability. The gateway optionally provides quality of service, distributed persistence, load balancing, and/or transformation services. Services are provided in a modular, service-oriented architecture (SOA) to accommodate the addition of services and/or applications.

Abstract: Methods and systems for use in in analyzing cyber-security threats for an aircraft are described herein. One example method includes generating an interconnection graph for a plurality of interconnected aircraft systems. The interconnection graph includes a plurality of nodes and a plurality of links. The method also includes defining a cost function for a cyber-security threat to traverse each link and defining a requirements function for a cyber-security threat to exploit each node. The method further includes generating a set of threat traversal graphs for each cyber-security threat of a plurality of cyber-security threats.

Abstract: A system for managing internetwork communications among a plurality of networks includes: (a) a plurality of edge network nodes; each respective edge network node being coupled to manage internetwork communications between a respective own network and other networks of the plurality of networks than the respective own network; and (b) at least one gateway-capable edge network node communicatingly coupled with each respective network node. Each respective edge network node includes a native communication network management unit for managing communications by the respective edge network node using a native communication protocol. Each respective edge network node includes an overlay communication network management unit for managing communications by the respective edge network node using an overlay communication protocol.

Abstract: A system, method, and apparatus for contextual-based virtual data boundaries are disclosed herein. In particular, the present disclosure relates to improvements in access control that work to restrict the accessibility of data based on assigning contextual data thresholds that create a virtual boundary. Specifically, the disclosed method involves assigning at least one threshold to at least one contextual criterion. The method further involves determining whether contextual information from the claimant meets at least one threshold to at least one contextual criterion. Also, the method involves authenticating the claimant, if the contextual information from the claimant meets at least one of the thresholds to at least one contextual criterion. Further, the method involves allowing the claimant access to the data, if the claimant is authenticated.