Abstract: A method for minimizing aircraft collisions, includes detecting a flight of an unmanned aerial system (UAS) in a restricted area and determining a location of a radio frequency (RF) emitter in communication with the UAS. The method includes, at each of a plurality of RF sensors of a network of wireless RF sensors, receiving RF emissions within an RF band pertaining to UAS control, processing the received RF emissions, and transmitting data derived from the processed RF emissions. The method further includes at a designated one of the plurality of RF sensors, receiving the transmitted data from the RF sensors, a processor computing, using the transmitted data received from the RF sensors, a location estimate for the RF emitter and to predict the UAS is flying, and based on the prediction, the processor generating an alert.

Abstract: A computer-implemented method for establishing and controlling a mobile perimeter and for determining a geographic location of an RF emitting source at or within the mobile perimeter includes receiving from RF sensors in a network, processed RF emissions from the source collected at RF sensors. The RF emissions follow a wireless protocol and include frames encoding RF emitting source identification information. The method further includes extracting RF emitting source identification information from the frames, processing the source identification information to identify the RF emitting source, and classifying the RF emitting source by one or more of UAS type, UAS capabilities, and UAS model. The method also includes receiving from the RF sensors, a geographic location of each RF sensor and a time of arrival (TOA) of the RF emissions at the RF sensor; and executing a multilateration process to estimate a geographic location of the RF emitting source.

Abstract: A computer-implemented method for establishing and controlling a mobile perimeter and for determining a geographic location of an RF emitting source at or within the mobile perimeter includes receiving from RF sensors in a network, processed RF emissions from the source collected at RF sensors. The RF emissions follow a wireless protocol and include frames encoding RF emitting source identification information. The method further includes extracting RF emitting source identification information from one or more of the frames, processing the source identification information to identify the RF emitting source, and classifying the RF emitting source by one or more of UAS type, UAS capabilities, and UAS model. The method also includes receiving from the RF sensors, a geographic location of each RF sensor and a time of arrival (TOA) of the RF emissions at the RF sensor; and executing a multilateration process to estimate a geographic location of the RF emitting source.

Abstract: A method of obfuscating a source of a multicast packet is provided. The method includes receiving a plurality of multicast packets at a first device from one or more second devices, the multicast packets received over one or more network links. A source internet protocol (IP) address of each multicast packet of the plurality of multicast packets is an IP address of the one or more second devices that sent the multicast packet. The source IP address of each of the plurality of multicast packets is changed to an IP address other than an IP address of the first device or an IP address of the one or more second devices. The plurality of multicast packets can then be sent.

Abstract: A method of cyber-attack protection is provided. The method includes receiving a unicast packet at a first router and determining whether a destination for the unicast packet is behind a cooperating router. If the destination for the unicast packet is behind a cooperating router, the unicast packet is tunneled from the first router to a tunnel multicast address to which the cooperating router subscribes.

Abstract: A method of cyber-attack protection is provided. The method includes receiving one or more internet group management protocol (IGMP) membership report messages on one or more ports of a network switch. A table is maintained associating each of the one or more ports to the one or more group addresses of which any hosts coupled to that port are members. An IGMP group leave message is received at a first port of the network switch. A group address in the group leave message is compared to all group addresses associated in the table with the first port. If the group address in the group leave message does not match any group address associated with the first port, the group leave message is dropped without being acted on in accordance with IGMP.

Abstract: A method for establishing and controlling a mobile perimeter and for determining a geographic location of an emitting radio frequency (RF) emitter in a vicinity of the mobile perimeter includes at each of a plurality of RF sensors, receiving an RF transmission, processing the received RF transmission to produce RF signal data, and wirelessly transmitting the RF signal data to a central station. At the central station, a processor: executes a cross-correlation process to: compare characteristics of pairs of RF signal data; based on the compared characteristics, determine a time difference of arrival (TDOA) between RF transmissions received at each RF sensor of a pair of RF sensors, and repeats the cross-correlation process for each pair of RF sensors from which RF signal data are received. Using the TDOA values for two or more pairs of RF sensors, the processor determines a location estimate for the RF emitter.