Electronic distribution of airplane software and the impact of information security on airplane safety

Lecture Notes in Computer Science (including subseries Lecture Notes in Artificial Intelligence and Lecture Notes in Bioinformatics)

Volumn 4680 LNCS, Issue , 2007, Pages 28-39

  Robinson, Richard ^a   Li, Mingyan ^a   Lintelman, Scott ^a   Sampigethaya, Krishna ^b   Poovendran, Radha ^b   Von Oheimb, David ^c   Bußer, Jens Uwe ^c   Cuellar, Jorge ^c  

^a BOEING COMPANY   (United States)

^b UNIVERSITY OF WASHINGTON   (United States)

^c SIEMENS AG   (Germany)

Author keywords

[No Author keywords available]

Indexed keywords

COMPUTER SOFTWARE; PUBLIC POLICY; SAFETY DEVICES; SECURITY OF DATA; WIRELESS NETWORKS;

AIRPLANE SAFETY; AIRPLANE SOFTWARE; ELECTRONIC DISTRIBUTION; SAFETY REGULATIONS;

AIRCRAFT;

EID: 38149033657     PISSN: 03029743     EISSN: 16113349     Source Type: Book Series    
DOI: 10.1007/978-3-540-75101-4_3     Document Type: Conference Paper

References (17)

1. DO-178B: Software Considerations in Airborne Systems and Equipment Certification. Radio Technical Commission for Aeronautics (RTCA) (1992)
2. Information Assurance Technical Framework, Release 3.1. US National Security Agency, http://www.iatf.net/framework_docs/version-3_1/
3. Common Criteria, http://www.commoncriteriaportal.org/
4. Federal Aviation Administration, 14 CFR Part 25, Special Conditions: Boeing Model 787-8 Airplane; Systems and Data Networks Security-Isolation or Protection from Unauthorized Passenger Domain Systems Access, [Docket No. NM364 Special Conditions No. 25-07-01-SC], Federal Register, vol. 72(71) (2007) http://edocket.access.gpo.gov/2007/pdf/E7-7065.pdf
5. Federal Aviation Administration, 14 CFR Part 25, Special Conditions: Boeing Model 787-8 Airplane; Systems and Data Networks Security-Protection of Airplane Systems and Data Networks From Unauthorized External Access, [Docket No. NM365 Special Conditions No. 25-07-02-SC], Federal Register, vol. 72(72) (2007) http://edocket.access.gpo.gov/2007/pdf/07-1838.pdf
6. Adams, C., Lloyd, S.: Understanding PKI: Concepts, Standards, and Deployment Considerations, 2nd edn. Addison-Wesley, Reading (2003)
7. Bird, G., Christensen, M., Lutz, D., Scandura, P.: Use of integrated vehicle health management in the field of commercial aviation. NASA ISHEM Forum (2005) http://ase.arc.nasa.gov/projects/ishem/Papers/Scandura_Aviation.pdf
8. Brostoff, S., Sasse, M.: Safe and sound: a safety-critical approach to security. In: ACM workshop on new security paradigms, pp. 41-50 (2001)
9. Ibrahim, L., Jarzombek, J., Ashford, M., Bate, R., Croll, P., Horn, M., LaBruyere, L., Wells, C.: Safety and Security Extensions for Integrated Capability Maturity Models, United States Federal Aviation Administration (2004), http://www.faa.gov/about/office_org/headquarters_offices/aio/documents
10. Leveson, N.: Safeware: System Safety and Computers. Addison Wesley Longman, Reading, Massachusetts (1995)
11. Lintelman, S., Robinson, R., Li, M., von Oheimb, D., Sampigethaya, K., Poovendran, R.: Security Assurance for IT Infrastructure Supporting Airplane Production, Maintenance, and Operation. National Workshop on Aviation Software Systems (2006), http://chess.eecs.berkeley.edu/hcssas/papers/Lintelman-HCSS- Boeing-Position_092906_2.pdf
12. Pfitzmann, A.: Why Safety and Security should and will merge, Invited Talk. In: Heisel, M., Liggesmeyer, P., Wittmann, S. (eds.) SAFECOMP 2004. LNCS, vol. 3219, Springer, Heidelberg (2004)
13. Robinson, R., Li, M., Lintelman, S., Sampigethaya, K., Poovendran, R., von Oheimb, D., Bußer, J.: Impact of Public Key Enabled Applications on the Operation and Maintenance of Commercial Airplanes. AIAA Aviation Technology, Integration and Operations (ATIO) conference (to appear, 2007)
14. Robinson, R., von Oheimb, D., Li, M., Sampigethaya, K., Poovendran, R.: Security Specification for Distribution and Storage of Airplane-Loadable Software and Airplane-Generated Data, Protection Profile, Available upon request (2007)
15. Rodriguez-Dapena, P.: Software safety certification: a multidomain problem. IEEE Software 16(4), 31-38 (1999)
16. Stavridou, V., Dutertre, B.: From security to safety and back, Conference on Computer Security. Dependability and Assurance, 182-195 (1998)
17. Weaver, R.: The Safety of Software - Constructing and Assuring Arguments, DPhil Thesis, Department of Computer Science, University of York, UK (2003)