公开(公告)号：US20200186560A1

公开(公告)日：2020-06-11

申请号：US16789445

申请日：2020-02-13

Applicant: Argus Cyber Security Ltd.

Inventor： Ofer BEN-NOON ,  Yaron GALULA ,  Ofer KAPOTA ,  Alexei KOVELMAN

IPC: H04L29/06 ,  H04W4/48 ,  H04W12/12 ,  H04W12/10 ,  G07C5/08 ,  H04L29/08

Abstract: A system and method for providing security to a network may include maintaining, by a processor, a model of an expected behavior of data communications over the in-vehicle communication network; receiving, by the processor, a message sent over the network; determining, by the processor, based on the model and based on a timing attribute of the message, whether or not the message complies with the model; and if the message does not comply with the model then performing, by the processor, at least one action related to the message.

公开(公告)号：US20160381059A1

公开(公告)日：2016-12-29

申请号：US15196338

申请日：2016-06-29

Applicant: Argus Cyber Security Ltd.

Inventor： Yaron GALULA ,  Ofer BEN-NOON ,  Oron LAVI ,  Ofer KAPOTA ,  Alexei KOVELMAN

IPC: H04L29/06 ,  H04L29/08 ,  B60R21/01

CPC classification number: H04L63/1441 ,  B60R16/0231 ,  B60R16/0232 ,  B60R21/01 ,  B60R25/10 ,  B60R25/30 ,  B60R2021/01197 ,  G07C5/0816 ,  G07C5/0841 ,  H04L63/02 ,  H04L63/123 ,  H04L63/1416 ,  H04L63/1425 ,  H04L63/20 ,  H04L67/12 ,  H04W12/00502 ,  H04W12/00505 ,  H04W12/00508 ,  H04W12/10 ,  H04W12/12

Abstract: A system and method for providing security to a network may include maintaining, by a processor, a model of an expected behavior of data communications over the in-vehicle communication network; receiving, by the processor, a message sent over the network; determining, by the controller, based on the model and based on a timing attribute of the message, whether or not the message complies with the model; and if the message does not comply with the model then performing, by the processor, at least one action related to the message.

Abstract translation: 用于向网络提供安全性的系统和方法可以包括由处理器维护车载通信网络上的数据通信的预期行为的模型; 由处理器接收通过网络发送的消息; 由所述控制器基于所述模型并基于所述消息的定时属性来确定所述消息是否符合所述模型; 并且如果消息不符合模型，则处理器执行与消息相关的至少一个动作。

公开(公告)号：US20170013005A1

公开(公告)日：2017-01-12

申请号：US15272934

申请日：2016-09-22

Applicant: Argus Cyber Security Ltd.

Inventor： Yaron GALULA ,  Ofer BEN-NOON ,  Ofer KAPOTA ,  Alexei KOVELMAN

IPC: H04L29/06 ,  H04L29/08

Abstract: A system and method for providing security to a network may include monitoring, by a processor, traffic on a first and second network portions of an in-vehicle communication network; determining whether or not a first message detected on the first network portion is anomalous based on at least one of: an attribute of a second message detected on the second network portion and an absence of a second message from the second network portion over a predefined time period; and, if it is determined the first message is anomalous then performing at least one action.

Abstract translation: 用于向网络提供安全性的系统和方法可以包括由处理器监视车载通信网络的第一和第二网络部分上的业务; 基于以下中的至少一个来确定在所述第一网络部分上检测到的第一消息是否是异常的：在所述第二网络部分上检测到的第二消息的属性以及在预定时间内从所述第二网络部分缺少第二消息 期; 并且如果确定第一消息是异常的，则执行至少一个动作。

公开(公告)号：US20160381066A1

公开(公告)日：2016-12-29

申请号：US15196226

申请日：2016-06-29

Applicant: Argus Cyber Security Ltd.

Inventor： Yaron GALULA ,  Ofer BEN-NOON ,  Oron LAVI ,  Alexei KOVELMAN ,  Ofer KAPOTA

IPC: H04L29/06 ,  G07C5/08 ,  B60R16/023 ,  H04L29/08

CPC classification number: H04L63/1441 ,  B60R16/0231 ,  B60R16/0232 ,  B60R21/01 ,  B60R25/10 ,  B60R25/30 ,  B60R2021/01197 ,  G07C5/0816 ,  G07C5/0841 ,  H04L63/02 ,  H04L63/123 ,  H04L63/1416 ,  H04L63/1425 ,  H04L63/20 ,  H04L67/12 ,  H04W12/00502 ,  H04W12/00505 ,  H04W12/00508 ,  H04W12/10 ,  H04W12/12

Abstract: A system and method for providing security to a network may include maintaining, by a processor, a model of an expected behavior of data communications over an in-vehicle communication network; receiving, by the processor, a plurality of messages communicated over the network; determining, by the processor, based on the model and based on content attributes of the plurality of messages, whether or not at least one of the messages complies with the model; and if at least one message does not comply with the model then performing, by the processor, at least one action related to the message.

Abstract translation: 用于向网络提供安全性的系统和方法可以包括由处理器维护在车载通信网络上的数据通信的预期行为的模型; 由所述处理器接收通过所述网络传送的多个消息; 由所述处理器基于所述模型和基于所述多个消息的内容属性来确定所述消息中的至少一个是否符合所述模型; 并且如果至少一个消息不符合模型，则由处理器执行与该消息相关的至少一个动作。