USING STAGED MACHINE LEARNING TO ENHANCE VEHICLES CYBERSECURITY

    公开(公告)号:US20220400125A1

    公开(公告)日:2022-12-15

    申请号:US17806921

    申请日:2022-06-14

    申请人: Red Bend Ltd.

    IPC分类号: H04L9/40 G06K9/62 G06N20/00

    摘要: Disclosed herein are systems and methods for detecting potential malicious attacks in vehicles operational environment using staged Machine Learning (ML), comprising creating a plurality of features vectors each comprising a plurality of features extracted from vehicle operational data generated by a plurality of devices deployed in one or more vehicles which is indicative of operation of the one or more vehicles, detecting, in real-time, a plurality of anomaly feature vectors using one or more unsupervised ML models applied to the plurality of feature vectors, identifying, in real-time, one or more potential cyberattack events using one or more supervised ML models applied to the plurality of anomaly feature vectors, and generating an alert indicative of the one or more potential cyberattack events.

    OVER THE AIR UPDATES USING DRONES
    22.
    发明申请

    公开(公告)号:US20190102164A1

    公开(公告)日:2019-04-04

    申请号:US15722988

    申请日:2017-10-02

    申请人: Red Bend Ltd.

    IPC分类号: G06F9/44 H04L29/08

    摘要: A computer implemented method of using a drone to provide update packages to embedded devices, comprising using one or more processors mounted on the drone for executing a code for maneuvering the drone to be in range of one or more wireless interfaces of each of a plurality of embedded devices, communicating with each embedded device through the wireless interface(s) to identify one or more attributes of each embedded device, selecting one of a plurality of update packages according to the identified attribute(s) and transmitting the selected update package to the each embedded device through the wireless interface(s).

    Systems and methods for in-place reorganization of device storage
    23.
    发明授权
    Systems and methods for in-place reorganization of device storage 有权
    设备存储现场重组的系统和方法

    公开(公告)号:US09588884B2

    公开(公告)日:2017-03-07

    申请号:US13827151

    申请日:2013-03-14

    申请人: Red Bend Ltd.

    IPC分类号: G06F12/02 G06F3/06 G06F9/445

    摘要: A method, and system for carrying out the method, for in-place reorganization of content, organized according to an original organization scheme, which is stored in a non-volatile storage of a device, to a target organization scheme. The method includes obtaining instructions to reorganize the content to a defined target organization scheme. The method further includes (i) generating, based on the instructions and applying target organization logic to a virtual storage, a sequence of update commands for generating, in the non-volatile storage, at least one target storage unit organized according to the defined target organization scheme, and (ii) executing the update commands on the non-volatile storage. Potential write-before-read conflicts may be identified based on the sequence of update commands, and potential conflicts resolved by reordering, adding, deleting, altering commands, and/or backing up content. The instructions may include instructions to repartition the nonvolatile storage from an original partition layout to a defined target partition layout.

    摘要翻译: 将存储在设备的非易失性存储器中的根据原始组织方案组织的内容的现场重组的方法和系统执行到目标组织方案。 该方法包括获得指令以将内容重新组织到定义的目标组织方案。 所述方法还包括(i)基于所述指令生成并将目标组织逻辑应用于虚拟存储器,所述更新命令序列用于在非易失性存储器中生成根据所定义的目标组织的至少一个目标存储单元 组织方案,以及(ii)在非易失性存储器上执行更新命令。 可能会根据更新命令的顺序识别潜在的写入前冲突,并通过重新排序,添加,删除,更改命令和/或备份内容来解决潜在的冲突。 指令可以包括将非易失性存储器从原始分区布局重新分配到定义的目标分区布局的指令。

    UPDATING NON-VOLATILE MEMORY IN A COMPUTER CONTROLLED DEVICE

    公开(公告)号:US20240289122A1

    公开(公告)日:2024-08-29

    申请号:US18573929

    申请日:2021-06-23

    申请人: Red Bend Ltd.

    IPC分类号: G06F8/658 G06F8/61

    CPC分类号: G06F8/658 G06F8/61

    摘要: A configurable computerized device comprising at least one hardware processor configured for executing a code for updating modified non-volatile memory content. Modifying the memory content is by: accessing data change information indicative of at least one modification applied to identified non-volatile memory content, where applying the at least one modification to the identified non-volatile memory content produces the modified non-volatile memory content used by the at least one hardware processor while executing a plurality of firmware computer instructions; and updating the modified non-volatile memory content, comprising: computing reconstructed memory content using the modified non-volatile memory content and the data change information such that the reconstructed memory content is identical to the identified non-volatile memory content; and computing new non-volatile memory content using the reconstructed memory content and at least one memory update instruction associated with the identified non-volatile memory content.

    VEHICLE-TO-VEHICLE MESSAGING
    25.
    发明公开

    公开(公告)号:US20240284531A1

    公开(公告)日:2024-08-22

    申请号:US18581167

    申请日:2024-02-19

    申请人: Red Bend Ltd.

    IPC分类号: H04W76/15 H04W64/00

    CPC分类号: H04W76/15 H04W64/00

    摘要: A method, a system and a computer readable medium of vehicle-to-vehicle messaging. The method, system and computer readable medium are using a server computer that receives sensor data from a plurality of vehicle computers of respective vehicles being driven, and collects the received sensor data, detects a spatiotemporal match between at least two of the vehicle computers, using the collected sensor data and tries to establish a messaging channel between at least two of the vehicle computers having the detected spatiotemporal match.

    Detecting vehicle malfunctions and cyber attacks using machine learning

    公开(公告)号:US12001553B2

    公开(公告)日:2024-06-04

    申请号:US17404759

    申请日:2021-08-17

    申请人: Red Bend Ltd.

    IPC分类号: G06F21/56 G07C5/08

    摘要: Techniques for detecting anomalies or cyber attacks on a vehicle. A computer-implemented method for anomaly or attack detection includes determining, using a first model, a first predicted value of a first variable message associated with a vehicle, determining, using a second model, a second predicted value of the first variable message associated with the vehicle, determining, based on a difference between an actual value of the first variable message and the first predicted value of the first variable message and on a difference between the actual value of the first variable message and the second predicted value of the first variable message, a vector, and determining, using a third model, an output value based on the vector, the output value corresponding to at least one of a likelihood that an anomaly or an attack is occurring or a type of the anomaly or the attack.

    ESTABLISHING TRUST BY A COMMUNITY OF VEHICLES

    公开(公告)号:US20240056297A1

    公开(公告)日:2024-02-15

    申请号:US18260702

    申请日:2021-01-07

    申请人: Red Bend Ltd.

    IPC分类号: H04L9/08 H04L9/30

    CPC分类号: H04L9/088 H04L9/30

    摘要: Disclosed herein are system and methods for authenticating vehicles based on trust established within a community of vehicles using a distributed ledger associating an identifier of each vehicle with a respective public key uniquely assigned to the respective vehicle. When a vehicle requests to establish a communication session with another party, which may be another vehicle or a service system, the vehicle may transmit its identifier and a message signed using its respective private key from which its public key is derived. In response, to authenticate the vehicle, the other party may communicate with one or more trusted vehicles which may verify the vehicle is genuinely associated with the public key by decoding the message using the public key retrieved from their local copy of the distributed ledger. The other party may then establish the communication session or refuse it based on the whether the verification is successful or not.

    COMMUNAL UPDATING DEVICE
    28.
    发明公开

    公开(公告)号:US20240045666A1

    公开(公告)日:2024-02-08

    申请号:US18364395

    申请日:2023-08-02

    申请人: Red Bend Ltd.

    IPC分类号: G06F8/65

    CPC分类号: G06F8/65

    摘要: There is provided a system for updating each of a plurality of mobile devices, comprising: at least one processor executing a code for: obtaining metadata from an end device without an updating agent deployed thereon, selecting an update server from a plurality of update servers according to the metadata, obtaining, from the update server, an indication of update code for installation on the end device, and updating the end device with the update code.

    ANOMALY DETECTION USING EMBEDDING SPACE REPRESENTATION OF SYSTEM STATES

    公开(公告)号:US20240031378A1

    公开(公告)日:2024-01-25

    申请号:US18254134

    申请日:2020-11-24

    申请人: Red Bend Ltd.

    IPC分类号: H04L9/40

    CPC分类号: H04L63/1408

    摘要: A method, system, and computer program product for anomaly detection using embedding space representation of system states. An anomaly detection model is trained using an anomaly detection algorithm and a plurality of reference vectors obtained using an embedding space representation process configured for mapping to a single point vector in an embedding space each of a plurality of system state snapshots comprised in a training dataset and each capturing during a defined time window a plurality of features of each process operating in the system. Responsive to receiving a testing dataset comprising one or more system state snapshots, one or more vectors in the embedding space are obtained using the embedding space representation process for mapping each system state snapshot in the testing dataset, and the anomaly detection model is used to determine whether a vector of the one or more vectors being indicative of a cyber-attack on the system.

    Systems and methods for disabling a malicious ECU in a controller area network (CAN) bus

    公开(公告)号:US11663330B2

    公开(公告)日:2023-05-30

    申请号:US17329618

    申请日:2021-05-25

    申请人: Red Bend Ltd.

    IPC分类号: G06F21/55 G06F21/56 H04L12/40

    摘要: There is provided a computer implemented method of disabling a malicious electronic control unit (ECU) of a plurality of ECUs in communication with a controller area network (CAN) bus network, the method executed by a computing device in communication with the plurality of ECUs and the CAN bus network, the method comprising: detecting a malicious message transmitted by the malicious ECU over the CAN bus network, and injecting a plurality of bits over the CAN bus network to trigger a predefined plurality of errors for disabling the malicious ECU before the malicious ECU makes an additional attempt to retransmit an additional instance of the malicious message.