Cybersecurity Engineering: Bridging the Security Gaps in Avionics Architectures and DO-326A/ED-202A
Cybersecurity Engineering: Bridging the Security Gaps in Avionics Architectures and DO-326A/ED-202A
Urban Air Mobility is envisioned as an on-demand, highly automated and autonomous air transportation modality. It requires the use of advanced sensing and data communication technologies to gather, process, and share flight-critical data. Where this sharing of mix-critical data brings opportunities, if compromised, presents serious cybersecurity threats and safety risks due to the cyber-physical nature of the airborne vehicles. Therefore the avionics system design approach of adhering to functional safety standards (DO-178C) alone is inadequate to protect the mission-critical avionics functions from cyber-attacks. To approach this challenge, the DO-326A/ED-202A standard provides a baseline to effectively manage cybersecurity risks and to ensure the airworthiness of airborne systems. In this regard, this paper pursues a holistic cybersecurity engineering and bridges the security gap by mapping the DO-326A/ED-202A system security risk assessment activities to the Threat Analysis and Risk Assessment process. It introduces Resilient Avionics Architecture as an experimental use case for Urban Air Mobility by apprehending the DO-326A/ED-202A standard guidelines. It also presents a comprehensive system security risk assessment of the use case and derives appropriate risk mitigation strategies. The presented work facilitates avionics system designers to identify, assess, protect, and manage the cybersecurity risks across the avionics system life cycle.
- Queen's University Belfast United Kingdom
- Queen's University Canada
- German Aerospace Center Germany
Cybersecurity, /dk/atira/pure/sustainabledevelopmentgoals/industry_innovation_and_infrastructure; name=SDG 9 - Industry, Innovation, and Infrastructure, Risk Assessment, name=SDG 9 - Industry, /dk/atira/pure/sustainabledevelopmentgoals/decent_work_and_economic_growth; name=SDG 8 - Decent Work and Economic Growth, name=General Computer Science, Cybersecurity Engineering, Safety-critical, Avionics, DO-326A, Avionic, /dk/atira/pure/sustainabledevelopmentgoals/good_health_and_well_being; name=SDG 3 - Good Health and Well-being, name=General Engineering, /dk/atira/pure/subjectarea/asjc/2200/2200; name=General Engineering, /dk/atira/pure/sustainabledevelopmentgoals/partnerships; name=SDG 17 - Partnerships for the Goals, /dk/atira/pure/sustainabledevelopmentgoals/industry_innovation_and_infrastructure, Innovation, /dk/atira/pure/subjectarea/asjc/2200/2200, Threat modelling, Risk assessment, name=SDG 17 - Partnerships for the Goals, Cyber Resilience, /dk/atira/pure/sustainabledevelopmentgoals/partnerships, ED-202A, name=SDG 8 - Decent Work and Economic Growth, /dk/atira/pure/sustainabledevelopmentgoals/decent_work_and_economic_growth, Threat Modelling, Cyber resilience, name=SDG 3 - Good Health and Well-being, 620, 004, Model-based system design, and Infrastructure, Safety-critical systems, /dk/atira/pure/sustainabledevelopmentgoals/good_health_and_well_being, /dk/atira/pure/subjectarea/asjc/1700/1700; name=General Computer Science, Threat analysis, /dk/atira/pure/subjectarea/asjc/1700/1700
Cybersecurity, /dk/atira/pure/sustainabledevelopmentgoals/industry_innovation_and_infrastructure; name=SDG 9 - Industry, Innovation, and Infrastructure, Risk Assessment, name=SDG 9 - Industry, /dk/atira/pure/sustainabledevelopmentgoals/decent_work_and_economic_growth; name=SDG 8 - Decent Work and Economic Growth, name=General Computer Science, Cybersecurity Engineering, Safety-critical, Avionics, DO-326A, Avionic, /dk/atira/pure/sustainabledevelopmentgoals/good_health_and_well_being; name=SDG 3 - Good Health and Well-being, name=General Engineering, /dk/atira/pure/subjectarea/asjc/2200/2200; name=General Engineering, /dk/atira/pure/sustainabledevelopmentgoals/partnerships; name=SDG 17 - Partnerships for the Goals, /dk/atira/pure/sustainabledevelopmentgoals/industry_innovation_and_infrastructure, Innovation, /dk/atira/pure/subjectarea/asjc/2200/2200, Threat modelling, Risk assessment, name=SDG 17 - Partnerships for the Goals, Cyber Resilience, /dk/atira/pure/sustainabledevelopmentgoals/partnerships, ED-202A, name=SDG 8 - Decent Work and Economic Growth, /dk/atira/pure/sustainabledevelopmentgoals/decent_work_and_economic_growth, Threat Modelling, Cyber resilience, name=SDG 3 - Good Health and Well-being, 620, 004, Model-based system design, and Infrastructure, Safety-critical systems, /dk/atira/pure/sustainabledevelopmentgoals/good_health_and_well_being, /dk/atira/pure/subjectarea/asjc/1700/1700; name=General Computer Science, Threat analysis, /dk/atira/pure/subjectarea/asjc/1700/1700
selected citations These citations are derived from selected sources.This is an alternative to the "Influence" indicator, which also reflects the overall/total impact of an article in the research community at large, based on the underlying citation network (diachronically).2 popularity This indicator reflects the "current" impact/attention (the "hype") of an article in the research community at large, based on the underlying citation network.Average influence This indicator reflects the overall/total impact of an article in the research community at large, based on the underlying citation network (diachronically).Average impulse This indicator reflects the initial momentum of an article directly after its publication, based on the underlying citation network.Average
Citations provided by BIP!Popularity provided by BIP!