民用航空电子系统网络安全验证方法研究

Cybersecurity Verification Method Research for Civil Avionics System

摘要:

针对民用飞机适航中的网络安全特殊风险,通过研究美欧等民航审定机构的网络安全特殊风险的测试过程和方法,结合常用的符合性测试方法提出了民用飞机电子系统网络安全测试方法。基于DO-326A中的网络安全测试框架,提出航电系统适用的网络安全鲁棒性测试方法与网络安全脆弱性测试方法。该方法为民用飞机电子系统网络安全适航提供了可行的思路。

Abstract:

In view of the special risks about civil aircraft airworthiness cybersecurity, the airborne system cybersecurity compliance verification is proposed by studying the cybersecurity certificate process and methods of the civil aviation certification agencies in the United States and Europe, combined with the commonly used compliance verification methods. Based on the network security verification activity framework proposed by DO-326A, the method was proposes the applicable cybersecurity robustness test method and cybersecurity vulnerability test method for civil avionics systems, and provides feasible ideas for the civil aircraft cybersecurity certification.