MITM: The Mystery in the Middle
Analyzes security concerns across the Aircraft Information Services Domain, ARINC 821 networking, and Electronic Flight Bags.
Summary
The Aircraft Information Services Domain
The Aircraft Information Services Domain (AISD) serves as a critical intermediary network domain on modern commercial aircraft, bridging flight safety domains with operational and passenger networks.
ARINC 821 Architecture and Interfaces
ARINC 821 defines the networking specifications and protocol standards connecting Electronic Flight Bags (EFBs), Flight Attendant Panels, and maintenance terminals across aircraft systems.
Connected Ground Systems and PKI Implementations
Maintaining secure communications between onboard units and airline ground infrastructure relies on public key infrastructure (PKI) certificates for software updates and telemetry transfers.
Threat Vectors in Cabin and Maintenance Networks
Potential security vulnerabilities exist where portable crew devices, cabin management systems, and maintenance terminals interface with the AISD, requiring strict boundary isolation and message validation.
Related talks
Aerospace Village·30 min
Nicholas Childs
Nicholas Childs demystifies aircraft avionics communication buses, providing a foundational primer on ARINC 429, MIL-STD-1553, and cockpit data networks.
Aerospace Village·28 min
Karl Koscher
Examines the architecture and security design of Boeing 737 Communication Management Units through embedded reverse engineering.
Aerospace Village·25 min
Alex Lomas · Ken Munro
Tours a decommissioned Boeing 747 airframe to examine cockpit systems, avionics bays, and physical attack surfaces.