Secure Airplane Development Lifecycle
Outlines Boeing's product security framework for integrating cyber resiliency into commercial airplane design and verification.
Summary
The E-Enabled Aircraft Attack Surface
Modern commercial aircraft integrate networked avionics, maintenance data links, and in-cabin connectivity, requiring the aviation industry to expand its historic safety focus to address intentional cyber threats.
Boeing Product Security Framework
Boeing Commercial Airplanes established dedicated product security programs to embed cyber resiliency across every stage of commercial aircraft conception, design, and manufacturing.
Integrating Security into the Development Lifecycle
The Secure Airplane Development Lifecycle embeds threat modeling, attack surface evaluations, and rigorous verification testing into traditional system engineering and certification gates.
Verifying Cyber Resiliency in Commercial Aviation
Ensuring long-term fleet resilience involves verifying software integrity, enforcing domain isolation between flight controls and passenger domains, and establishing robust incident response processes.
Related talks
Aerospace Village·28 min
Karl Koscher
Examines the architecture and security design of Boeing 737 Communication Management Units through embedded reverse engineering.
Aerospace Village·30 min
Nathalie Feyt · Lawrence Rowell · Yannick Le Ray
Shows how red and blue teams collaborate using a hack-and-fix methodology to harden avionics, in-cabin entertainment, and ATM systems.
Aerospace Village·25 min
Alex Lomas · Ken Munro
Tours a decommissioned Boeing 747 airframe to examine cockpit systems, avionics bays, and physical attack surfaces.