Cyber-agents for Live Onboard Aviation Network Security (CLOANS)

ATC-NY will develop the Cyber-agents for Live, Onboard Aviation Network Security (CLOANS) software, a distributed cybersecurity monitoring, reporting, and response system. CLOANS employs portable agents that collect and analyze network activities onboard flight systems in near-real-time, reporting Cyber Threat Intelligence to system operators as well as to the centralized CLOANS Service. The CLOANS Service can be deployed on cloud or on-premises computing infrastructure, where it automatically discovers, manages, and processes reports from CLOANS cyber-agents. The CLOANS Service maintains a Common Operating Picture of aviation networks’ cybersecurity posture and enables personnel at Cyber Security Operations Centers and flight data centers to coordinate threat mitigation strategies and respond in time to thwart attacks. Using CLOANS, aviation staff, security engineers, and operators can improve safety and security through heightened situational awareness. Early alerts and detailed reports reduce the risk and impact from cyberattacks, particularly manipulation and abuse of multicast protocols.