The Interplay Between Safety and Security in Aviation Systems
Breaks down civil aviation certification frameworks including DO-356A and ARP4754B to show how safety analyses inform threat modeling and security assurance.
Summary
Aviation Certification Foundations
Civil aviation safety has traditionally relied on established engineering standards such as DO-178. As aircraft architectures incorporate widespread digital connectivity, security standards like DO-356A have become essential components of modern airworthiness certification.
Safety Analyses and Design Assurance Levels
Development standards ARP4754B and ARP4761A define system development and safety analysis processes. Design Assurance Levels (DAL) quantify system criticality based on potential failure condition severity.
Bridging Safety Analyses into Threat Modeling
Safety hazard assessments directly inform security threat models. Analyzing architectural interdependencies enables engineers to identify where cyber threats could trigger critical safety failures across airborne equipment.
Security Assurance Levels and Mitigations
Security mitigations are assigned specific Security Assurance Levels (SAL). Implementing verified security controls ensures that software and hardware components meet airworthiness compliance mandates.
Related talks
Creator Stage·21 min
Matt Gaffney
Shares firsthand experiences navigating vulnerability disclosure programs in the aviation industry, highlighting common pitfalls and best practices.
Creator Stage·55 min
M. Weigand · S. Wagner
Examines technical and policy challenges in civil aviation security as new European and United States regulatory frameworks take effect.
Main Stage·20 min
John Mauger
US Coast Guard Rear Admiral John Mauger discusses safety culture, engineering integrity, and lessons learned from the investigation into the catastrophic loss of the TITAN submersible.