William J Hughes FAA Technical Center INFORMATION SECURITY

William J. Hughes FAA Technical Center INFORMATION SECURITY GROUP AEEC INFORMATION SECURITY WORKING GROUP STATUS ACP WG N 4 New Orleans November 2004 Vic Patel, FAA/ATO-P FEDERAL AVIATION ADMINISTRATION 1 • AIR TRAFFIC ORGANIZATION 1

AEEC and Security • AEEC is an association of airlines, organized by ARINC, that develop standards for avionics • AEEC has seen increased activity in security over the last few years: • ICAO communiqué to AEEC in 2002 concerning need for work on key management for ATN security • Desire for ACARS security standards • Clear need for security during work to develop standards for ADN (LAN on an aircraft), Gatelink (WLAN from aircraft to airport), and others • After a number of ad hoc meetings on security and key management, and a security tutorial given by FAA/ATO-P, ACB-250 at the 2003 AEEC General Session, AEEC formed an Information Security (SEC) WG in 2004 to work these F E D E R Aissues. L AVIATION ADMINISTRATION • AIR TRAFFIC ORGANIZATION 2 2

AEEC SEC WG • • AEEC SEC WG seen as a focal point for AEEC security activities across many different applications Airline participation in SEC WG has been high. (This is crucial for success in AEEC. ) Initial product of SEC WG will be an Information Security CONOPS for aircraft. FAA/ATO-P, ACB-250 has been asked to lead drafting of security sections of CONOPS. Subsequent work will look at developing standards security tools that can used by many aircraft applications – for an example a key management / PKI standard is being considered. FEDERAL AVIATION ADMINISTRATION 3 • AIR TRAFFIC ORGANIZATION 3