RTCA SC-216 Aeronautical Systems Security

Transcription

1 RTCA SC-216 Aeronautical Systems Security FAA SW&AEH Aug 20-21, 21, 2008 Denver, CO Presented by: Dr. Daniel P. Johnson, Co-Chair Chair RTCA SC-216 Contact:

2 Topics RTCA SC-216, "Aeronautical Systems Security" EUROCAE WG-72, "Aeronautical Systems Security" Tasks and Schedule RTCA SC-216 Aeronautical Systems Security 2

3 SC-216 Tasks Document guidance for a network security assurance process and acceptable means of compliance for safe, secure and efficient aircraft network design and operations Develop guidelines for good practices and compliance with the guidance Serve as a resource and coordinator for security-related related issues and solutions with all RTCA Special Committees Coordinate with other groups and organizations Nature of coordination may vary for different groups Actively pursue formation of a joint activity with EUROCAE WG 72. RTCA SC-216 Aeronautical Systems Security 3

4 WG-72: Objectives O1 - Define data security context & issues related to Air Transportation System (ATS) O2 - Provide methodology / guidelines to support ATS stakeholders in managing (assessing and treating) security issues O3 - Provide means of compliance with: O3 1 Airworthiness regulations (airworthiness and continuing airworthiness) O3 2 2 Non airworthiness related national or international regulations s & laws RTCA SC-216 Aeronautical Systems Security 4

5 Is there an aircraft infosecurity problem? Not if we do our job properly! RTCA SC-216 Aeronautical Systems Security 5

6 Safety / Security Overlap Safety Assessment Scope Effects from: Environment Failures Human error External dependencies Malicious Activity Security Assessment Scope Product Development Product Assurance Technical controls Operational dependencies Operational controls Policies Procedures Training Monitoring IT System Development Part 25 ACO / Manufacturer Part 121 PI / Airline / AEG RTCA SC-216 Aeronautical Systems Security 6

7 European airworthiness regulations Getting Airworthiness Continuing Airworthiness RTCA SC-216 Aeronautical Systems Security 7

8 Air Transportation System Manufacturers Service Provider Networks Internet ATS Operations Passenger Services Airport Operations Wide Area Network Airline IT Infrastructure Maintenance Operations Local Area Network Airline Flight Operations Airline Ground Operations RTCA SC-216 Aeronautical Systems Security 8

9 US Regulatory Scope FAA Controlled Operational Type Design Manufacturers Unregulated Service Provider Networks Internet ATS Operations Passenger Services Airport Operations Wide Area Network Airline IT Infrastructure Maintenance Operations Local Area Network Airline Flight Operations Airline Ground Operations RTCA SC-216 Aeronautical Systems Security 9

10 A Functional Look at the Externalities (courtesy of ARINC 664 part 5) Functions Airline Operations Roles Responsibility Security Other Control the Aircraft Operate the Aircraft Inform and Entertain the Passengers Aircraft Control Domain Airline Information Services Domain Passenger Information and Entertainment Services Domain Passenger-owned Devices Flight and Embedded Control Systems Administrative Functions Flight Support In-Flight Entertainment Passenger Internet Computing Devices Wireless Devices (Cellular, PDAs) Cabin Core Systems Cabin Support Maintenance Support On-board Web Access Passenger Device Interface : : Gaming Devices Air-Ground Network Interface Air-Ground Network Interface Air-Ground Network Interface VHF / HF / SATCOM Wireless LAN Broadband / Cellular RTCA SC-216 Aeronautical Systems Security 10

11 Regulatory Processes Regulatory Handoff for Aeronautical Systems Security Airworthiness Certification Airborne Components Airborne Systems Groundworthiness Certification Ground Components Ground Systems Self- Accreditation Airspace Traffic Management and Control Regulator Accreditation Airport operations Aircraft Dispatch and Maintenance Noncertified/ Nonaccredited Noncertified Components Noncertified Systems Aircraft Business Operation and Administration RTCA SC-216 Aeronautical Systems Security 11

12 WG-72 : Document Structure Module 0: Coordination/links with other WGs/SCs and with A.A. Air transportation system security reference model Module 5 Safety Sys. Dev. Life-cycle Module 4 Module 1 Airworthiness Scope : Airborne part of the Aeronautical system Human deliberate/accidental aggressions Interactions between safety and security Groundworthiness Specific Assumptions Objectives Scope : Ground part of the aeronautical system Not Populated yet Module 2 Methodologies Initial Scope : Safety and regularity of flight Not in Final Scope : Any security risk First Release Module? Item Assurance Security assurance requirement Security evaluation A/C - Generic - Not in First GND Release Security control operation and management Scope : All security controls with a special consideration for cryptography Levels of control & management related to the criticality of the security control to be addressed Detection /Reaction /Recovery Scope : Aircraft and Ground Information gathering/ storage/download/pro cessing / Security incidents response RTCA SC-216 Aeronautical Systems Security Crisis Management 12 Useful for any security related stakes (Safety and business)

13 Process of Processes Process of Processes for Aeronautical Systems Security Module 5 Module 1 & 2 Module 4 Suppliers Operators Regulators Oversight Initiation and System Study Agreements Conditions Certification Accreditation Accreditation Evidence Assessment Evidence Approval Evidence Evidence RequirementsValidation Requirements Approval Certificate Agreements Summaries and Recommendations Conditions Reports Evidence Risk Management Evidence Update Update Requirements Approval Operation and Support Product Handoff Reports Coordinated Incident Response Approval Evidence Evidence Update Product Support Approval Coordinated Incident Response Risk Management Operation and Support Product Support Develoment and Implementation Product Handoff RTCA SC-216 Aeronautical Systems Security 13

14 WG72 Module 1: Airworthiness Security ARP 4761 (System Safety Assessment process) (System Security Assessment process) ED-79/ ARP 4754 (System development life-cycle: Inception/ Development/ Implementation) ARP 5150 (System development life-cycle: Operation/ Support/ Maintenance/ Admin./ Disposal) ED 12/ DO-178 (Software development life-cycle) DO-254 (HW development life-cycle) AIRWORTHINESS INCLUDING DATA SECURITY RTCA SC-216 Aeronautical Systems Security 14 Scope of Module 1

15 Airworthiness Process Framework Concepts + Externalities Type-certified Aircraft + Guidance + External Agreements Requirements + Externalities + Development Environment Aircraft Implementation + Guidance + External Agreements Architecture + Objectives + Preliminary Assessment Requirements + Externalities + Development Environment System Integration + Verification + Final Assessment Implementation + Guidance + External Agreements Architecture + Objectives + Preliminary Assessment Requirements + Externalities + Development Environment Item Integration + Verification + Final Assessment Implementation + Guidance + External Agreements Design, Build, Procure, Assure RTCA SC-216 Aeronautical Systems Security 15

16 Process Compliance (sample) System Guidance and External Agreements System Guidance correct and complete. System Guidance consistent and sufficient for System Externalities. es. System Guidance consistent and sufficient for System Implementation. System Guidance consistent and sufficient consideration of Item Guidance. System Guidance consistent and sufficient consideration of Item External Agreements. System External Agreements correct and complete. System External Agreements consistent and sufficient for System Externalities. System External Agreements consistent and sufficient for System Implementation. System External Agreements consistent and sufficient consideration of Item Guidance. System External Agreements consistent and sufficient consideration of Item External Agreements. RTCA SC-216 Aeronautical Systems Security 16

17 Evidence Compliance (sample) External Agreements Assumptions and requirements for the purpose of coordinating roles and responsibilities between dependent systems and external actors. Includes interface control documents, data flows, assumptions on operations, countermeasures, policies and procedures res that are not included in user guidance. See also User Guidance. User Guidance Specifications and requirements for the secure preparation, use, and administration of a system or item by an operator. operator. These are the restrictions or requirements on the policies and procedures needed to satisfy the security objectives. Includes all relevant requirements for polices and procedures involving preparation, use, administration, maintenance, disposal RTCA SC-216 Aeronautical Systems Security 17

18 Classification Compliance (ongoing) Definitions and Matrices for Classifying and Assigning Impact (Catastrophic, Hazardous, Major, Minor, No-Effect) Threat Likelihood (Extremely Improbable, Extremely Remote, Remote, Probable, Frequent) Security Level (A, B, C, D, E) Risk Level (High, Medium, Low) Attack Potential (under discussion) RTCA SC-216 Aeronautical Systems Security 18

19 WG-72: Module 4 4 Operational Compliance RTCA SC-216 Aeronautical Systems Security 19

20 WG-72 Module 5: ATS Domain Model The Air Transportation System Information Reference model Airline Aircraft Manufacturer Airport Aircraft Service Providers Government ANSPs Information Information Asset Asset Identification Identification Agencies Step Step 1 Step Step 2 Step Step 3 Step Step 4 Input Input to to Module Module 11&2 Risk Risk Analysis Analysis Information Information Asset Model Asset Model Inventory of Inventory of Information Information Assets Assets IA IA Security Security Value & Value & Safety Impact Safety Impact Assessment Assessment IA IA Implementation Implementation Options and Threat Options and Threat Identification Identification RTCA SC-216 Aeronautical Systems Security 20

21 Timeline WG-72 WG-72 WG-72 WG-72 WG /1/2006 3/1/2006 4/1/2006 5/1/2006 6/1/2006 7/1/2006 8/1/2006 9/1/ /1/ /1/ /1/2006 1/1/ /31/2006 WG-72 WG-72 WG-72 WG /1/2007 3/1/2007 4/1/2007 5/1/2007 6/1/2007 7/1/2007 8/1/2007 9/1/ /1/ /1/ /1/2007 1/1/ /31/2007 SC-216 SC-216 WG-72 WG-72 WG /1/2008 3/1/2008 4/1/2008 5/1/2008 6/1/2008 7/1/2008 8/1/2008 9/1/ /1/ /1/ /1/2008 1/1/ /31/2008 SC-216 SC-216 SC-216 SC /1/2009 3/1/2009 4/1/2009 5/1/2009 6/1/2009 7/1/2009 8/1/2009 9/1/ /1/ /1/ /1/2009 1/1/ /31/2009 SC-216 Documents Prepared 12/15/2009 RTCA SC-216 Aeronautical Systems Security 21

22 EUROCAE Document Release Process ED Draft V1 (Working Group approval by consensus) Open Consultation preparation (Eurocae( Secretariat prepares this): 1-41 weeks Open Consultation (comments sheet filled by the Civil Aviation Community): C 4-66 weeks ED Draft V2 (Comments resolution by the WG): weeks Final approval Preparation (Eurocae( Secretariat formats Final ED): 3-43 weeks Eurocae Council Approval (Council Approval ED Draft V2 + Comment resolution summary) ED-XX Publication RTCA SC-216 Aeronautical Systems Security 22

23 EUROCAE Document Types Minimum Aviation System Performance Specification (MASPS) Operational Services and Environment Definition (OSED) Safety and Performance Requirements (SPR) specification Interoperability (INTEROP) requirements specification Process Specification Minimum Operational Performance Specification (MOPS) Technical Specification Guidance Document Report RTCA SC-216 Aeronautical Systems Security 23

24 Committee Leadership Co-chairman Co-chairman RTCA Program Director Designated Federal Official Person Chuck Royalty Daniel Johnson Harold Moses Raymond Decerchio Organization Boeing Commercial Airplanes Honeywell Aerospace Electronic Systems RTCA Technical Programs and Continued Airworthiness Branch, AIR-120 Phone Fax honeywell.com Raymond See for Meeting Calls and Terms of Reference RTCA SC-216 Aeronautical Systems Security 24

25 Chairman: : X. Depin (AIRBUS SAS) Secretary: : A. Tarter (Ultra Electronics) Members: AIRBUS/ BOEING THALES avionics/ THALES information systems/ RINICOM/ HONEYWELL ROCKWELL COLLINS-F/ SAFRAN FAA/ CAA-Netherlands/ DGAC/ EUROCONTROL/ NLR SAFEE/ ERNST&YOUNG/University Of Leeds BAE Systems/ Green Hills Software/ Ultra Electronics HELIOS TECHNOLOGY/ CARILLON IS/ QINETIQ US Department Of Transportation (DOT)- Volpe Center CESG WG-72: Participants See for further information. RTCA SC-216 Aeronautical Systems Security 25

26 Upcoming Meeting Dates WG Oct,, Paris, FR SC Sept, Washington DC 4-66 Nov, Washington DC January 2009, Washington DC RTCA SC-216 Aeronautical Systems Security 26

27 Liaisoning and Coordination SC-216 and Eurocae WG-72, Aeronautical Systems Security Joint members, including chairs Leadership discussions pursuing joint activities ATA JCG, Joint Co-Ordination Group Joint members Common calendar between security committees and events ATA DSWG, Digital Security Working Group Joint members RTCA SC-205/Eurocae WG-71, Software Considerations Designated liaison member RTCA SC-203, Unmanned Aircraft Systems Designated liaison member AEEC NIS, Network Infrastructure and Security Joint members, including chairs RTCA SC-216 Aeronautical Systems Security 27

28 Current Activities SG2 Airworthiness Security Process (SAAPM) EUROCAE WG72 Module 1 Guidance for processes for aircraft certification Methods for processes for aircraft certification Means of compliance with aeronautical regulations, including but not limited to FAR SG3 Aircraft Network External Interface Security (MASPS) EUROCAE WG72 Module 4 &5 Guidelines for selecting, operating, and managing security controls ols Guidelines for managing security concerns involving external systems and/or organizations Design & architecture guidelines for compliance with the processes & methods e.g. layered protection, crew alerting, other aspects unique to aircraft design & operation RTCA SC-216 Aeronautical Systems Security 28

29 WG-72: Current status Module 1, 4 and 5 materials circulated for WG-72 members internal review: Module 1: Air Worthiness Security Assessment Process version 3.1 Module 4: Security Control & Operation ref Draft V7.1 Module 5: Air Transportation System Reference Model for Aeronautical Information Security Draft K RTCA SC-216 Aeronautical Systems Security 29