Local Area Networks (LANs) in Aircraft - FTP Directory Listing - FAA

Department of Defense Instruction Number 5200.40, “DoD Information Technology Security
Certification and Accreditation Process (DITSCAP),” December 30, 1997.
Barbir, A., Murphy, S., and Yang, Y., “Generic Threats to Routing Protocols,” RFC 4593,
October 2006, 22 pages.
http://www.ieff.org/rfc/rfc4593.txt
DoD 8510.1-M, “Department of Defense Information Technology Security Certification and
Accreditation Process (DITSCAP) – Application Manual,” Assistant Secretary of Defense for
Command, Control, Communications, and Intelligence, July 31, 2000.
Defense Acquisition Guidebook, Version 1, October 17, 2004.
http://akss.dau.mil/dag/
Little, A., “Study Into the Potential Impact of Changes in Technology on the Development of Air
Transport in the UK,” Final Report to the Department of the Environment, Transport and
Regions (DETR), November 2000.
14. GLOSSARY.
Accreditation—Accreditation is a formal declaration by a DAA that a software system or device
is approved to operate in a particular safety and security mode using a prescribed set of
safeguards at an acceptable level of risk.
Assurance—Assurance is the measure of confidence that a system’s safety and security features
have been implemented and work properly. Assurance properties must apply throughout a
system’s life cycle and is achieved through design, testing, and analysis.
Certification—The comprehensive evaluation of the technical and nontechnical safety and
security features of a system and the other safeguards that are created in support of the
accreditation process, to establish the extent that a particular design and implementation meets
the set of specific safety and security requirements.
Control—A feature or function of the IT system used to mitigate the likelihood of a vulnerability
being exercised and to reduce the impact of such an adverse event.
Crack—To electronically attack a computer or device by a successful exploit that compromises
the machine and enables the attacker to take control over the machine, download Trojan Horses,
and establish back doors so that the attacker could re-establish control over the machine at any
subsequent time.
Daemon—A daemon is a background process that performs a specific function or system-related
task (e.g., print). In Unix or Linux systems, daemons are programs rather than parts of the
operating system’s kernel. In other operating systems, they may be a constituent part of the
operating system itself. Many daemons start at the operating system’s boot time and continue to
157