Behind the scenes of hacking airplanes -

Zoltan Madarassy provides a comprehensive technical overview of commercial aircraft cybersecurity engineering, walking through the architecture, communication buses, and security assessment methodologies applied to modern aviation systems.

[06:44] Madarassy outlines the core security domains established under standard avionics architectures: the Aircraft Control Domain (ACD) responsible for flight-critical operations, the Airline Information Services Domain (AISD) handling airline administrative data, the Passenger Information and Entertainment Services Domain (PIESD), and Passenger Owned Devices (POD). He explains the physical, logical, and cryptographic isolation mechanisms separating passenger Wi-Fi and in-flight entertainment from core flight systems.

[13:29] The presentation analyzes standard avionics data buses and protocols, including unidirectional ARINC 429 buses, ARINC 664 (Avionics Full-Duplex Switched Ethernet / AFDX), and CAN bus integrations [16:28]. Madarassy examines data loading mechanisms such as ARINC 615A [19:51] used to install field-loadable software updates on Line Replaceable Units (LRUs). He concludes by discussing airworthiness cybersecurity certifications (such as DO-178C, DO-254, and DO-326A/ED-202A) and the strict safety and regulatory constraints [27:05] that govern security testing on operational aircraft.

(AI summary — Gemini Flash)