In this paper, we present an approach to detecting novel cyber attacks though a form of program diversification, similar to the use of n-version programming for fault tolerant systems. Building on extensive previous and ongoing work by others on the use of code clones in a wide variety of areas, our Functionally Equivalent Variants using Information Synchronization (FEVIS) system automatically generates program variants to berun in parallel, seeking to detect attacks through divergence in behavior. Unlike approaches to diversification that only change program memory layout and behavior, FEVIS can detect attacks exploiting vulnerabilities in execution timing, string processing, and other logic errors. We are in the early stages of research and development for this approach, but have made sufficient progress to provide a proof of concept and some lessons learned. In this paper we describe FEVIS and its application to diversifying an open-source webserver, with results on several different example classes of attack which FEVIS will detect.

Honeywell is completing integration of the new Boeing 777 integrated Airplane Information Management System (AIMS). AIMS functions range from hard real-time to non-real-time, include flight-critical and non-essential functions, and must all reside on the same distributed multiprocessor system. This system, based on Aeronautical Radio Inc's ARINC 659 specification, allows for high resource utilization while providing strict partitioning and provable performance via pre-scheduling of processing and communication resources. Such scheduling presents significant theoretical and practical problems. This paper describes these scheduling requirements with the intent of providing the research community with practical bounds for problem definition.>

Honeywell is completing design and will build hardware for the new Boeing 777 integrated Airplane Information Management System (AIMS). AIMS functions have time constraints from hard real-time to non-real-time, and criticality levels from flight critical to nonessential. The challenge is that these functions share time, memory, and input/output (I/O) on a redundant, distributed multiprocessor. An innovative offline scheduling tool and table driven bus protocol control data transfers and Ada process synchronization with verifiable resource allocation, latency control, and performance. >