Electronic Distribution of Airplane Loadable Software Some Challenges

Electronic Distribution of Airplane Loadable Software Some Challenges of Integrating On-Board Computational Systems with Ground-Based IT Networks Richard V. Robinson, Scott A. Lintelman, Mingyan Li, Boeing David von Oheimb, Siemens Corporate Technology Radha Poovendran, Krishna Sampigethaya, University of Washington

Airplane Software - State of the Art Engineering, Operations & Technology | Phantom Works • Safety Requirements for Airplane Software • • Abundant literature Abundant practical experience Fertile field formal methods research and application Security Requirements for Airplane Software • • • E&IT | Mathematics and Computing Technology Rapidly evolving area Topic of a number of today’s talks Security Requirements on Ground Support Systems • • • Existing systems designed around diverse business requirements Ground support and airline business systems inter-connected via company private networks and the Internet No regulatory advice or guidance exists for these systems or for their supporting networks

Key Questions Engineering, Operations & Technology | Phantom Works • Viability of Aircraft / Infrastructure Integration • • Pro-active measures (no “incidents” to date) Security on the ground • • Can ground systems influence airworthiness? Can integration be exploited to improve safety in flight? Security Implications of Integration • • Can an airplane system be “on the Internet”? Business benefits expected to accrue to integration Safety Implications of Integration • • E&IT | Mathematics and Computing Technology What are the attendant risks to airline business? Security in the air • Should software and data be screened before they “board”?

Challenges Engineering, Operations & Technology | Phantom Works • • E&IT | Mathematics and Computing Technology How to leverage / exploit depth of existing safety expertise How to determine what system elements require regulation or certification How to develop standards that don’t unduly impede innovation, inhibit profitability Evaluation Assurance Levels (EAL)