Local Area Networks (LANs) in Aircraft - FTP Directory Listing - FAA

software items. Is there a security model or theory that could be discovered to
authoritatively address this issue so that highly assured software could be definitively
created within networked environments?
• Industry has experience creating Bell-LaPadula Confidentiality Model, HAGs. However,
there is little or no experience creating Biba Integrity Model HAGs. Therefore, there is a
need to study and articulate the controls needed within Biba Integrity Model HAGs. This
study should distinguish the differences (if any) between Biba Integrity Model HAG
technology and Bell-LaPadula Confidentiality Model HAG technology.
• What are the mechanisms that will integrate DoD and FAA certification processes and
procedures? Is it possible to create a common certification system that reliably addresses
safety in FAA environments and security in DoD environments, and both safety and
security in joint certification environments?
• Should Level D software systems be treated as Requirement 1 systems and organized into
VPN enclaves as this study currently states (see section 8.2), or should they rather
become Requirement 2 systems and not be enclaved into network partitions (VPNs) such
as Level E systems?
12. REFERENCES.
1. ARP 4754, “Certification Considerations for Highly-Integrated or Complex Aircraft
Systems,” 1996, SAE International, 400 Commonwealth Drive, Warrendale, PA 15096-
0001.
2. ARP 4761, “Guidelines and Methods for Conducting the Safety Assessment Process on
Civil Airborne Systems and Equipment,” 1996, SAE International, 400 Commonwealth
Drive, Warrendale, PA 15096-0001.
3. 14 CFR 23.1309, Equipment, systems, and installations, Revised January 1, 2006.
4. 14 CFR 25.1309, Equipment, systems, and installations, Revised January 1, 2006.
5. RTCA/DO-178B, “Software Considerations in Airborne Systems and Equipment
Certification,” December 1, 1992, Prepared by SC-167.
6. RTCA/DO-254, “Design Assurance Guidance for Airborne Electronic Hardware,” April
19, 2000, Prepared by SC-180.
7. Knight, J., “Software Challenges in Aviation Systems,” NASA Grant number NAG-1-
2290, 2002. http://dependability.cs.virginia.edu/publications/safecomp.2002.pdf
8. FAA Advisory Circular 120-76A, “Guidelines for the Certification, Airworthiness, and
Operational Approval of Electronic Flight Bag Computing Devices,” March 17, 2003.
148