Space system TT&C monitoring includes analyzing network traffic comprising of data packets between a front-end processor (FEP) and a cryptographic unit. A JavaScript Object Notation (JSON) object is created when the network traffic containing a vehicle command is detected. The JSON object is transmitted, by way of a data transport mechanism, to either a cyber defense module or a security information and event management (SIEM) module for further ingestions and visualization. The JSON object is analyzed using machine learning (ML) module or a rule-based intrusion detection system (IDS) module to generate an anomaly score for the SIEM module for further ingestions and visualization.
Keywords: software, computer security arrangements, machine learning, inference methods, data switching networks
International Class: H04L 29/06 20060101 H04L029/06, G06N 20/00 20060101 G06N020/00, G06N 5/04 20060101 G06N005/04, H04L 12/26 20060101 H04L012/26, H04L 29/08 20060101 H04L029/08