飞机运营商的飞机网络安全.pptx

1、,Aircraft Cybersecurityfor Aircraft Operators,Cameron WrightSouthwest Airlines,Air Operators are responsible for the continued airworthiness of an aircraftFrom a cyber perspective,some aircraft have more computer-like capabilities than others,which may lead to cyber vulnerabilitiesSpecific aircraft

2、types with those computer-like capabilities are assigned special conditions(SC)The FAA addresses those cyber vulnerability concerns in D301,Airworthiness Requirements,Air Carrier Certificate,Federal Aviation Act of 1958,Title 14 Code of Federal Regulations(CFR),Part 61,Part 91,Part 97,Part 117,Part

3、119,Part 121,Created the FAA,Aeronautics and Space Regulations,Certification:Pilots,Flight Instructors,and Ground Instructors,General Operating and Flight Rules,Standard Instrument Procedures,Flight and Duty Limitations and Rest Requirements,Certification:Air Carriers and Commercial Operators,Operat

4、ing Requirements,Operations Specification,A,B,C,D,General:Administrative Authorizations,Enroute Authorizations and Limitations,Airplane Terminal Instruments Procedures and Airport Authorizations and Limitations,Maintenance Authorizations,Special Authorizations,ANSP Documents Breakdown,Operations Spe

5、cification,Special Authorizations,D,Maintenance Authorizations,D301,Aircraft Network Security Program,FAA Advisory Circular 119-1,RTCA DO-326,RTCA DO-355,RTCA DO-392,Information Security Guidance for Continued Airworthiness,Airworthiness and Operational Approval of Aircraft Network Security Program,

6、Airworthiness Security Process Specification,Guidance on Security Event Management,ATA Spec 42,NIST SP800-30,NIST SP800-61,Aviation Industry Standards for Digital Information Security,Guide for Conducting Risk Assessments,Computer Security Incident Handling Guide,ARINC645,ARINC667,Software Distribut