公开(公告)号：US11418519B2

公开(公告)日：2022-08-16

申请号：US16934838

申请日：2020-07-21

申请人： Red Bend LTD.

发明人： Guy Ruvio ,  Saar Yaacov Dickman ,  Yuval Weisglass ,  Anuja Sonalker

IPC分类号： H04L9/40 ,  G06F21/55 ,  G06F21/64 ,  H04W12/10 ,  H04W12/106 ,  H04W12/128 ,  B60R25/00 ,  H04L67/12 ,  H04W12/00 ,  H04W4/44 ,  H04W4/70

摘要： There is provided a method for identifying malicious activity that changes the integrity of data sent out from a vehicle, comprising: intercepting, by an output data monitoring agent that monitors data sent out from the vehicle to an external receiving computing unit using a communication interface in communication with a network; intercepting, by at least one sensor data monitoring agent that monitors sensor data outputted by at least one sensor associated with the vehicle; monitoring the integrity of the data sent out by the vehicle by analyzing the data collected by the output data monitoring agent with the sensor data collected by the at least one sensor data monitoring agent to identify a mismatch; and identifying an indication of malicious activity that changed the data sent out from the vehicle relative to the data sensed by the at least one sensor.

公开(公告)号：US11513188B2

公开(公告)日：2022-11-29

申请号：US16652974

申请日：2017-10-02

申请人： Red Bend Ltd.

发明人： Yuval Weisglass ,  Yoram Oren ,  Tomer Gilad ,  David Mor Ofek

IPC分类号： G01S7/36 ,  G01S17/931 ,  G01S7/495 ,  G01S7/537 ,  G01S13/931 ,  G01S15/89 ,  G01S15/931 ,  G01S7/02

摘要： A method for processing signals of active sensor systems including processing an emitted signal to include at least one distinguishing feature, the emitted signal emitted by an active sensor system adapted to intercept a reflection of the emitted signal, and to analyze the reflection of the emitted signal for determining at least one parameter of at least one object located in a space, analyzing an intercepted portion to verify the at least one distinguishing feature in the intercepted portion, and processing the intercepted portion as the reflection of the emitted signal when the at least one distinguishing feature is verified.

公开(公告)号：US11544383B2

公开(公告)日：2023-01-03

申请号：US16368113

申请日：2019-03-28

申请人： Red Bend Ltd.

发明人： David Mor Ofek ,  Yuval Weisglass

IPC分类号： G06F21/00 ,  G06F21/57 ,  G06F8/656 ,  G06F8/75 ,  G06F21/54 ,  G06F21/55 ,  G06F9/445 ,  G06F11/07

摘要： A system of mitigating code weaknesses in a target code by adding micro functionality fixes. The system includes a mitigation module installed a memory chip of a device and a server for identifying a plurality of code weaknesses in a target code installed in a memory chip of a device and sending configuration instructions to the mitigation module, the configuration instructions comprising: a plurality of micro functionality fixes, and a plurality of code weakness locations each associated with one of the plurality of code weaknesses and one of the plurality of micro functionality fixes. The execution of the mitigation module by at least one processor of the device induces an installment of the plurality of micro functionality fixes in the plurality of code weakness locations.

公开(公告)号：US11748474B2

公开(公告)日：2023-09-05

申请号：US17073167

申请日：2020-10-16

申请人： Red Bend Ltd.

发明人： Guy Ruvio ,  Yuval Weisglass ,  Saar Yaacov Dickman

IPC分类号： G06F21/85 ,  G06F21/55 ,  H04L9/40 ,  H04W12/122 ,  H04W12/126 ,  H04W12/128 ,  H04W4/48 ,  H04L67/12 ,  H04L12/40

CPC分类号： G06F21/554 ,  G06F21/85 ,  H04L63/0227 ,  H04L63/1416 ,  H04L63/1425 ,  H04W12/122 ,  H04W12/126 ,  H04W12/128 ,  H04L67/12 ,  H04L2012/40215 ,  H04W4/48

摘要： The present invention provides a security system, and methods useful for vehicle CAN bus communication mapping and attack originator identification, comprising: a CAN Bus Monitor, (CBM), configured to monitor the CAN bus communication comprising one or more frames, to and/or from at least one Electronic Control Unit, (ECU); a characterization module in communication with the CBM, configured to generate at least one characteristic for the monitored communication from each the ECU and at least one characteristic for each communication frame; (c) a comparator unit in communication with the characterization module, configured to compare one or more the characteristics of at least one frame against characteristics of each the ECU communication in order to detect at least one anomaly; and, (d) one or more Identification module in communication with the comparator, configured to identify at least one ECU originating an attack on the CAN bus.

公开(公告)号：US10992495B2

公开(公告)日：2021-04-27

申请号：US16697723

申请日：2019-11-27

申请人： Red Bend Ltd.

发明人： Guy Ruvio ,  Saar Yaacov Dickman ,  Yuval Weisglass ,  Zachi Avatichi

IPC分类号： G06F13/00 ,  H04L12/40 ,  G05B19/042

摘要： Methods, systems, and devices manipulate operation of at least one electronic control unit (ECU) connected to a controller area network (CAN) bus. The at least one ECU includes at least one error counter, by counting errors associated with at least one ECU. The manipulating is based on generating and broadcasting via the CAN at least one bit stream destined to at least one ECU, thereby manipulating at least one ECU status, determined by the ECU error counter and querying for its status state.

公开(公告)号：US10944765B2

公开(公告)日：2021-03-09

申请号：US15549365

申请日：2015-02-08

申请人： Red Bend Ltd.

发明人： Guy Ruvio ,  Yuval Weisglass ,  Saar Dickman

IPC分类号： H04L29/06 ,  H04W12/12 ,  H04L12/24 ,  H04W84/18 ,  H04W84/12 ,  H04W4/70

摘要： Apparatus, system and method useful for machine to machine (M2M) communication cyber-attack detection and prevention, are provided. An embedded security bridge (ESB), operatively connected to at least one proximal machine and at least one M2M module. The M2M module is in communication with at least one remote machine, and configured to enable communication between at least one remote machine and at least one proximal machine through the ESB. The ESB includes: one or more inspection units, configured for communication analysis for identifying communication and/or content suspicious as malicious, and, one or more decision units operatively connected to the inspection unit. The decision unit is configured to perform at least one action based on analysis of at least one inspection unit. The ESB is configured to detect by means of the inspection unit and prevent by means of the decision unit cyber-attacks on the proximal machine, the remote machine, or both.