Abstract: Certain aspects of the disclosure provide security for automatic dependent surveillance-broadcast (ADS-B) data communications. An authenticator can verify the sender of ADS-B data, distinguishing legitimate from malicious actors and enabling a receiver to trust or discard the data. The authenticator can use a multifactor approach to verify a sender's identity, including cryptography, trusted third parties, and data analysis. A cryptographic challenge-response can be performed by generating and encrypting a random number with the public key of the sender and verifying the decrypted random number with the private key. The authenticator can also obtain and validate a digital certificate issued by a trusted party and evaluate the ADS-B data against flight mission parameters.

Abstract: Described are methods and apparatus, including computer program products, for mitigating against a cyber attack on a network. An indication is received from an intrusion detection system that an event has occurred representing a threat to the network. Upon receiving the event from the intrusion detection system, automated processes determine a port associated with the threat and automatically block the port.

Abstract: Described are methods and apparatus, including computer program products, for mitigating against a cyber attack on a network. An indication is received from an intrusion detection system that an event has occurred representing a threat to the network. Upon receiving the event from the intrusion detection system, automated processes determine a port associated with the threat and automatically block the port.