The digitalization and increased connectivity of aircraft systems not only offer opportunities, such as optimizing business and operational processes as well as the introduction of novel services for passengers, but also pose new security-related risks to the system. As part of the security risks analysis which became mandatory for airworthiness security since the publication of the new certification specification CS-25.1319, threat scenarios and attack paths are defined to enable a more structured identification and assessment of security risks. In order to identify potential attack paths, it is necessary to examine the architectures that were created during the development of the system or the software. These architectures establish the prescribed pathways that an attacker is able to take due to the connection of the architectural elements. However, none of the available approaches for modeling attack paths link the attack paths to the architecture model. In this paper a novel approach for modeling attack paths and linking attack paths to the architecture model is presented. The Systems Modeling Language (SysML)-based approach extends the Risk Analysis and Assessment Modeling Language (RAAML) and introduces elements for modeling attack paths made of various attack actions and vulnerabilities as well as the asset under consideration. Furthermore, relationships are defined to link these attack path elements to the architecture and path segments encompassing the architectural elements. Moreover, the linkage between attack paths and the architectural elements is used to highlight the attack paths in the architectures by using tool-specific capabilities of Cameo Systems Modeler. The approach is exemplarily illustrated taking the example of a seat controller that is connected to the In-Flight Entertainment (IFE) system enabling the adjustment of the seat.


    Access

    Check access

    Check availability in my library

    Order at Subito €


    Export, share and cite



    Title :

    Airworthiness Security Methods: Modeling and Highlighting Attack Paths in System and Software Architectures for Threat Scenario-Driven Security Analysis


    Contributors:


    Publication date :

    2024-09-29


    Size :

    1486231 byte





    Type of media :

    Conference paper


    Type of material :

    Electronic Resource


    Language :

    English



    Airworthiness security process specification

    European Organisation for Civil Aviation Equipment | TIBKAT | 2014


    Survey of Security Threat and Attack Scenario for Commercial UAVs

    Sergeevna, Basan Elena / Dmitrievna, Mikhailova Vasilisa / Igorevich, Silin Oleg et al. | IEEE | 2022




    Security Threat Modeling and Automated Analysis for System Design

    Meng, Baoluo / Durling, Michael / Smith, William | SAE Technical Papers | 2021