ISMS

Model Framework To Enhance Aviation's Information Security Management Systems (ISMS) Operations, System And Data Management

Abstract

Commercial aviation is at the threshold of the era of the e-enabled airplane, brought about by the convergence of rapidly expanding world-wide data communication infrastructures, network-centric information processing and commoditized lightweight computational hardware. With advanced avionics, processing and wireless communication capabilities, the e-enabled airplane can revolutionize the current air transportation system. However, the use of unregulated information technology and wireless technologies introduce vulnerabilities that can be exploited to provide unauthorized access to the onboard aviation information systems and impede their operation. The emerging security threats are not covered by current aviation guidance and regulations hence, remain to be addressed. This paper presents a comprehensive survey of security of the e-enabled airplane with applications such as electronic distribution of loadable software and data, as well as future directions such as wireless health monitoring, networked control, and airborne ad hoc networks.

Table of Contents

Abstract2

1. Theory4

2. Analysis And Design7

3. Model And Realization12

4. Result And Evaluation16

5. Conclusion43

References44

1. Theory

Over the last century, aviation has evolved to become a driving force for the global economy. In the year 2006, air transportation produced an estimated 3.5 trillion dollars, nearly 8% of the world gross domestic income(Latorella 2000: 133-161) . However, air traffic has overwhelmingly increased over the decades, with number of passengers and amount of cargo transported on world-wide routes reaching an unprecedented 4.4 billion and 85.6 million tons, respectively, in 2006 (Bai 2009: 748-750). Crowded skies combined with factors such as changing business models, terrorist threats, environmental concerns and passenger needs, test the current capacity and capabilities of air transportation systems (Bird 2009: 131-139). Consequently, today the aerospace industry is witnessing a revolutionary trend in commercial aviation, seeking technological and process innovations in aircraft design, manufacturing, operation, maintenance, and traffic management. (Eschenauer 2009: 41-47)

Large-scale initiatives are underway to assuredly integrate new aviation technologies into the civil airspace in the next two decades, with an expected three-fold increase in airspace capacity(McFadden 2009: 177-184). In the UK, the Federal Aviation Administration (FAA) is collaborating with other government agencies, industry and academia to modernize the current National Airspace System to the Next Generation Air Transportation System . Another similar initiative is the Advisory Council for Aeronautics Research in Europe (Logan 2009: 108-111).

A recent vision in commercial aviation is the e-enabled air plane, i.e., an aircraft that can participate as an intelligent node in a global information network . The e-enabled airplane is envisioned to possess advanced avionics highly integrated with wireless commercial technologies for automated functionalities, e.g., global positioning system for navigation , wireless sensors and Radio Frequency Identification (RFID) tags for maintenance. (Lee 2006: 267-273) Wireless access points in the in-aircraft network will facilitate communications between onboard systems as well as communications with off-board infrastructure of air traffic control or airlines (aircraft-to infrastructure communications or A2I) and another aircraft (aircraft-to-aircraft communications or A2A); see Fig. 1.

Off the shelf and wireless solutions can substantially reduce onboard equipment maintenance overhead as well as ...