William J. Hughes FAA Technical Center INFORMATION SECURITY GROUP

1
William J. Hughes FAA Technical
CenterINFORMATION SECURITY GROUP
AEEC INFORMATION SECURITY WORKING GROUP
STATUS ACP WG N4New Orleans November 2004
Vic Patel, FAA/ATO-P
2
AEEC and Security

• AEEC is an association of airlines, organized by
  ARINC, that develop standards for avionics
• AEEC has seen increased activity in security over
  the last few years
• ICAO communiqué to AEEC in 2002 concerning need
  for work on key management for ATN security
• Desire for ACARS security standards
• Clear need for security during work to develop
  standards for ADN (LAN on an aircraft), Gatelink
  (WLAN from aircraft to airport), and others
• After a number of ad hoc meetings on security and
  key management, and a security tutorial given by
  FAA/ATO-P, ACB-250 at the 2003 AEEC General
  Session, AEEC formed an Information Security
  (SEC) WG in 2004 to work these issues.

3
AEEC SEC WG

• AEEC SEC WG seen as a focal point for AEEC
  security activities across many different
  applications
• Airline participation in SEC WG has been high.
  (This is crucial for success in AEEC.)
• Initial product of SEC WG will be an Information
  Security CONOPS for aircraft. FAA/ATO-P, ACB-250
  has been asked to lead drafting of security
  sections of CONOPS.
• Subsequent work will look at developing standards
  security tools that can used by many aircraft
  applications for an example a key management /
  PKI standard is being considered.