Abstract: A circuit includes a bandgap circuit configured to generate multiple reference voltages. A first voltage glitching detection circuit utilizes a first one of the reference voltages and a first power rail to generate a first reset signal in response to a voltage glitching attack on the first power rail, and a second voltage glitching detection circuit operates independently of the reference voltages to generate a second reset signal in response to the voltage glitching attack on the first power rail.

Abstract: Embodiments include a component of a lightweight and low-cost robotic exoskeletons for teleoperation applications.

Abstract: Methods, systems, and devices for data management are described. A data management system may determine risk levels for a plurality of computing objects. A risk level for a computing object is determined based on a respective quantity of elements comprising sensitive information within the computing object and a respective quantity of users with access to the computing object. The data management system may display the visualizations for a selected subset of computing objects in a user interface. The visualizations for the computing objects may be positioned within the user interface based on respective quantities of elements comprising sensitive information within the computing objects and further based on respective quantities of users with access to the computing objects. The user interface may be configured to receive a selection of a time period and reposition the visualizations of the computing objects within the user interface.

Abstract: Aspects of the present disclosure generally relate to apparatus and methods for an adjustable de-chucking voltage associated with an electrostatically charged substrate in a processing chamber. An example method of de-chucking a substrate disposed in a process chamber includes processing a substrate in a chamber body, the substrate being coupled to a substrate support comprising a chucking electrode. The method further includes monitoring a property associated with a lift pin assembly movable relative to the chucking electrode via an actuator. The method further includes adjusting a first voltage level applied to the chucking electrode in response to the property associated with the lift pin assembly satisfying one or more criteria.

Abstract: Mapping of an avionic network is obfuscated by interposing a network module between an external-access node and a bus of an avionics network. First and second network maps are generated and loaded on the network module. The network map accessible to the external-access node is changed from the first network map to the second network map, to disrupt any reconnaissance of the avionics network.

Abstract: A computer-implemented method includes: receiving, by an authentication device, from a client device and via a network device, a plurality of passcode packets as part of a request to be authenticated by the authentication device; recording, by the authentication device, a sequence of port identifiers corresponding to respective ports of the network device via which the plurality of passcode packets are received; and authenticating, by the authentication device, the client device based on the sequence of port identifiers.

Abstract: A testing device includes a first interface device configured to enable communication with a first component of a vehicle and a second interface device configured to enable communication with a second component of the vehicle. The testing device includes a test module storage configured to store one or more test modules and also includes a user interface and a test controller. The test controller is responsive to the user interface to select a test module from the test module storage and to cause the first interface device to communicate first test data to the first component of the vehicle and to cause the second interface device to communicate second test data to the second component of the vehicle to perform a vulnerability test associated with the selected test module.

Abstract: A computer-implemented method includes: receiving, by an authentication device, from a client device and via a network device, a plurality of passcode packets as part of a request to be authenticated by the authentication device; recording, by the authentication device, a sequence of port identifiers corresponding to respective ports of the network device via which the plurality of passcode packets are received; and authenticating, by the authentication device, the client device based on the sequence of port identifiers.

Abstract: A testing device includes a first interface device configured to enable communication with a first component of a vehicle and a second interface device configured to enable communication with a second component of the vehicle. The testing device includes a test module storage configured to store one or more test modules and also includes a user interface and a test controller. The test controller is responsive to the user interface to select a test module from the test module storage and to cause the first interface device to communicate first test data to the first component of the vehicle and to cause the second interface device to communicate second test data to the second component of the vehicle to perform a vulnerability test associated with the selected test module.

Abstract: A vehicle network system is configured to detect unauthorized intrusions by a passenger-owned device, and to identify the passenger-owned device based at least in part on stored information representative of network communications. The vehicle network system can be further configured to determine a position of the intruding passenger-owned device within a passenger area of the vehicle and to obtain a name and/or camera image of a passenger associated with the device. The position of the intruding device can be identified based at least in part on communications between the intruding device and one or more network-access devices distributed throughout the passenger area.

Abstract: A method of obfuscating mapping of an avionic network is disclosed, including operatively coupling a network module between an external-access node and an avionics bus, with all communications between the external-access node and the avionics bus passing through the network module. The method further includes generating a first network map identifying network addresses for a first set of components on at least a first portion of the avionics bus, loading the first network map on the network module, and making the first network map accessible to the external access node. The method further includes generating at least a second network map different from the first network map and loading the second network map on the network module. The method further includes changing the network map accessible to the external-access node from the first network map to the second network map.

Abstract: Systems for and methods of securely communicating between a ground station and an aircraft are presented. The communications are among a plurality of nodes, including a ground based node and a plurality of aircraft based nodes. Each node stores at least a respective portion of a blockchain representing interactions among at least some of the nodes. Control nodes may initiate a privileged network action by: broadcasting to the plurality of control nodes a blockchain record representing the privileged network action, receiving from control nodes a plurality of votes representing validation results of the privileged network action, determining that a consensus from the control node votes indicates that the privileged action is permissible, and publishing to respective blockchain portions of each of the plurality of nodes a derivation of the blockchain record representing the privileged action, where the system implements the privileged action based on the determining.

Abstract: A vehicle network system is configured to detect unauthorized intrusions by a passenger-owned device, and to identify the passenger-owned device based at least in part on stored information representative of network communications. The vehicle network system can be further configured to determine a position of the intruding passenger-owned device within a passenger area of the vehicle and to obtain a name and/or camera image of a passenger associated with the device. The position of the intruding device can be identified based at least in part on communications between the intruding device and one or more network-access devices distributed throughout the passenger area.

Abstract: This disclosure relates to updating information in devices of remote systems over a network. A method includes receiving, via a first switch, a first selection. The method also includes activating, based on the first selection, a data partition in a storage device corresponding to the first device. The method further includes deactivating based on the first selection, data partitions in the storage device corresponding to non-selected devices. Additionally, the method includes storing information in the data partition corresponding to the first device. Moreover, the method includes receiving, via a second switch, a second selection. The method also includes determining that the first selection matches the second selection. The method further includes retrieving, based on the determining, the information from said activated data partition. Additionally, the method includes providing the retrieved information to a first device that corresponds to the first selection and the second selection.

Abstract: Systems for and methods of securely communicating between a ground station and an aircraft are presented. The communications are among a plurality of nodes, including a ground based node and a plurality of aircraft based nodes. Each node stores at least a respective portion of a blockchain representing interactions among at least some of the nodes. Control nodes may initiate a privileged network action by: broadcasting to the plurality of control nodes a blockchain record representing the privileged network action, receiving from control nodes a plurality of votes representing validation results of the privileged network action, determining that a consensus from the control node votes indicates that the privileged action is permissible, and publishing to respective blockchain portions of each of the plurality of nodes a derivation of the blockchain record representing the privileged action, where the system implements the privileged action based on the determining.

Abstract: A method and system for providing medical assistance onboard an aircraft is provided. A number of secure wireless connections are established between an onboard device located on the aircraft and a remote device located remotely with respect to the aircraft, to enable communications between a device operator using the onboard device and a medical professional using the remote device. Information about a medical event that occurs onboard the aircraft is sent from the onboard device to the remote device using the number of secure wireless connections. A medical assessment of the medical event by the medical professional is received at the onboard device from the remote device over the number of secure wireless connections.

Abstract: Provided are methods and systems for multiband wireless data transmission between aircraft and ground systems. The transmission uses different wavelength ranges, each wavelength range corresponding to a different data domain and establishing a different communication channel. This wavelength differentiation provides physical separation between different data domains and, as a result, improves data security. Furthermore, a single broadband antenna is used on the exterior of the aircraft for transmitting data sets from different data domains. The single antenna configuration reduces drag and weight and improves structural integrity of the aircraft in comparison to multi-antenna configurations. Different aircraft communication modules, which are connected to different aircraft systems, handle different data domains and operate at different wavelength ranges. These modules are connected to the same antenna using a multiplexer.

Abstract: A system for evaluating a cyber-attack on an aircraft may include a display associated with the aircraft, a sensor system configured to generate sensor data for a pilot, and a data processing system configured to: (1) generate simulation data, (2) generate a flight simulation from the simulation data, (3) simulate the cyber-attack on at least one aircraft system during the flight simulation, (4) generate virtual flight data during the flight simulation, and (5) present the sensor data and the virtual flight data.

Abstract: A system includes a transmitting line replaceable unit (TLRU) configured to receive messages including instructions for avionics receiving line replaceable units (RLRUs). The system further includes a memory configured to store validation data including a set of expected messages. A monitor is further included and is configured to monitor messages received at the TLRU and further configured to determine whether received messages are valid based on at least a portion of the set of expected messages stored in the memory. A plurality of RLRUs are further included and configured to receive message from the TLRU and to execute the instructions included in the received messages.

Abstract: The present invention generally relates to systems and methods for encrypting data. The disclosed techniques can include tracking a plurality of flight parameter values for a plurality of flight parameters of an aircraft, generating a first cryptographic key from the plurality of flight parameter values, encrypting plaintext using the first cryptographic key to generate a first ciphertext, and sending, from a sender to a receiver, a message comprising the first ciphertext.