Avionics News September 2014 - 36

ARE DIGITAL AVIONICS SECURE?
Continued from page 35

Using common sense
Thankfully, thwarting this type of attack doesn't require a
degree in computer science or cybersecurity.
"A common-sense security measure such as changing
the default password on the ground computer would have
defeated this attack," Barber said. "These types of simple
measures should be routine for any organization."
Roberts agreed, "There are several things you can do
- segment the systems from the Internet, enable security
on the base OS, encrypt the systems, remove and change
default passcodes, IDs and accounts. And get a penetration
testing company to come in and help you."
To engineers like Barber, the theatrics feel out of
proportion with reality.
"It is one thing to be able to upload a 'crate' intended
to accomplish a desired action and another for the action
actually to be accomplished," Barber said. "Avionics systems

Good Advice

typically have checks to help ensure that certain maintenance
commands cannot be accomplished while in flight. It is
unclear whether the avionics' operating system actually
allowed the contents of the uploaded 'crate' to execute on
the hardware. Further, it is unclear whether bench tests
simulating in-flight conditions were performed that actually
proved the contents of the uploaded 'crates' were able to
accomplish the desired action."
Garmin uses rigorous data input validations, proprietary
operating systems and protocols, configuration control of
avionics and its software, partitioning that separates higher
criticality functions from lower ones, and designs that
ensure systems perform only their intended functions. It all
works together to help ensure Garmin avionics are secure,
according to Barber.
"We do agree that ... protecting, controlling, and managing
systems and environments is just good design for safety
- something that we are convinced has been done by the
avionics industry for many years, and will continue in the
future," he said. q

Keeping avionics

SECURE

Here are a few tips to help ensure digital avionics remain secure.
* Follow avionics manufacturers' maintenance instructions when connecting an aircraft
system to anything in the "outside world."
* Install virus scanners on all testing and maintenance PCs, update virus definitions as
frequently as they are available, and scan any media used to view and transfer data.
* Dedicate media such as SD cards and USB sticks to aircraft maintenance only. Do not
bring either in from the outside and use it.
* Train personnel not to click on links or open documents from unknown senders, even if
it looks official.
* Follow manufacturer's guidance on how to maintain the equipment's security. q

36

avionics news

*

september

2014



Table of Contents for the Digital Edition of Avionics News September 2014

Point of Communication
AEA Now
The View from Washington
International News and Regulatory Updates
Software Management
Member Profile
Keeping a business in the family
Are digital avionics secure?
A Conversation With...
Meet the AEA board of directors
Before & After
The Autonomous Navigation Systems AET Endorsement
Aviation Aces
Legal Ease
Business Basics
Member Profile
AEA members unveil new ADS-B solutions at AirVenture
What's New
Marketplace Classifieds
Avionics News September 2014 - Intro
Avionics News September 2014 - Cover1
Avionics News September 2014 - Cover2
Avionics News September 2014 - 1
Avionics News September 2014 - 2
Avionics News September 2014 - 3
Avionics News September 2014 - Point of Communication
Avionics News September 2014 - 5
Avionics News September 2014 - AEA Now
Avionics News September 2014 - 7
Avionics News September 2014 - 8
Avionics News September 2014 - 9
Avionics News September 2014 - 10
Avionics News September 2014 - 11
Avionics News September 2014 - 12
Avionics News September 2014 - 13
Avionics News September 2014 - The View from Washington
Avionics News September 2014 - 15
Avionics News September 2014 - International News and Regulatory Updates
Avionics News September 2014 - 17
Avionics News September 2014 - 18
Avionics News September 2014 - 19
Avionics News September 2014 - Software Management
Avionics News September 2014 - 21
Avionics News September 2014 - 22
Avionics News September 2014 - 23
Avionics News September 2014 - Member Profile
Avionics News September 2014 - 25
Avionics News September 2014 - 26
Avionics News September 2014 - 27
Avionics News September 2014 - Keeping a business in the family
Avionics News September 2014 - 29
Avionics News September 2014 - 30
Avionics News September 2014 - 31
Avionics News September 2014 - 32
Avionics News September 2014 - 33
Avionics News September 2014 - Are digital avionics secure?
Avionics News September 2014 - 35
Avionics News September 2014 - 36
Avionics News September 2014 - 37
Avionics News September 2014 - A Conversation With...
Avionics News September 2014 - 39
Avionics News September 2014 - Meet the AEA board of directors
Avionics News September 2014 - 41
Avionics News September 2014 - Before & After
Avionics News September 2014 - 43
Avionics News September 2014 - The Autonomous Navigation Systems AET Endorsement
Avionics News September 2014 - 45
Avionics News September 2014 - 46
Avionics News September 2014 - 47
Avionics News September 2014 - Aviation Aces
Avionics News September 2014 - 49
Avionics News September 2014 - 50
Avionics News September 2014 - 51
Avionics News September 2014 - Legal Ease
Avionics News September 2014 - 53
Avionics News September 2014 - 54
Avionics News September 2014 - 55
Avionics News September 2014 - 56
Avionics News September 2014 - 57
Avionics News September 2014 - Business Basics
Avionics News September 2014 - 59
Avionics News September 2014 - 60
Avionics News September 2014 - 61
Avionics News September 2014 - 62
Avionics News September 2014 - 63
Avionics News September 2014 - Member Profile
Avionics News September 2014 - 65
Avionics News September 2014 - AEA members unveil new ADS-B solutions at AirVenture
Avionics News September 2014 - 67
Avionics News September 2014 - 68
Avionics News September 2014 - 69
Avionics News September 2014 - 70
Avionics News September 2014 - 71
Avionics News September 2014 - What's New
Avionics News September 2014 - 73
Avionics News September 2014 - 74
Avionics News September 2014 - 75
Avionics News September 2014 - 76
Avionics News September 2014 - 77
Avionics News September 2014 - Marketplace Classifieds
Avionics News September 2014 - 79
Avionics News September 2014 - 80
Avionics News September 2014 - Cover3
Avionics News September 2014 - Cover4
http://www.brightcopy.net/allen/avne/56-10
http://www.brightcopy.net/allen/avne/56-9
http://www.brightcopy.net/allen/avne/56-8
http://www.brightcopy.net/allen/avne/56-7
http://www.brightcopy.net/allen/avne/56-6
http://www.brightcopy.net/allen/avne/56-5
http://www.brightcopy.net/allen/avne/56-4
http://www.brightcopy.net/allen/avne/56-3
http://www.brightcopy.net/allen/avne/56-2
http://www.brightcopy.net/allen/avne/56-1
http://www.brightcopy.net/allen/avne/55-12
http://www.brightcopy.net/allen/avne/55-11
http://www.brightcopy.net/allen/avne/55-10
http://www.brightcopy.net/allen/avne/55-9
http://www.brightcopy.net/allen/avne/55-8
http://www.brightcopy.net/allen/avne/55-7
http://www.brightcopy.net/allen/avne/55-6
http://www.brightcopy.net/allen/avne/55-5
http://www.brightcopy.net/allen/avne/55-4
http://www.brightcopy.net/allen/avne/55-3
http://www.brightcopy.net/allen/avne/55-02
http://www.brightcopy.net/allen/avne/55-01
http://www.brightcopy.net/allen/avne/54-12
http://www.brightcopy.net/allen/avne/54-11
http://www.brightcopy.net/allen/avne/54-10
http://www.brightcopy.net/allen/avne/54-9
http://www.brightcopy.net/allen/avne/54-8
http://www.brightcopy.net/allen/avne/54-7
http://www.brightcopy.net/allen/avne/54-6
http://www.brightcopy.net/allen/avne/54-5
http://www.brightcopy.net/allen/avne/54-4
http://www.brightcopy.net/allen/avne/54-3
http://www.brightcopy.net/allen/avne/54-2
http://www.brightcopy.net/allen/avne/54-1
http://www.brightcopy.net/allen/avne/53-12
http://www.brightcopy.net/allen/avne/53-11
http://www.brightcopy.net/allen/avne/53-10
http://www.brightcopy.net/allen/avne/53-9
http://www.brightcopy.net/allen/avne/53-8
http://www.brightcopy.net/allen/avne/53-7
http://www.brightcopy.net/allen/avne/53-6
http://www.brightcopy.net/allen/avne/53-5
http://www.brightcopy.net/allen/avne/53-4
http://www.brightcopy.net/allen/avne/53-3
http://www.brightcopy.net/allen/avne/53-2
http://www.brightcopy.net/allen/avne/53-1
http://www.brightcopy.net/allen/avne/52-12
http://www.brightcopy.net/allen/avne/52-11
http://www.brightcopy.net/allen/avne/52-10
http://www.brightcopy.net/allen/avne/52-9
http://www.brightcopy.net/allen/avne/52-8
http://www.nxtbook.com/allen/avne/52-7
http://www.nxtbook.com/allen/avne/52-6
http://www.nxtbook.com/allen/avne/52-5
http://www.nxtbook.com/allen/avne/52-4
http://www.nxtbook.com/allen/avne/52-3
http://www.nxtbook.com/allen/avne/52-2
http://www.nxtbook.com/allen/avne/52-1
http://www.nxtbook.com/allen/avne/51-12
http://www.nxtbook.com/allen/avne/51-11
http://www.nxtbook.com/allen/avne/51-10
http://www.nxtbook.com/allen/avne/51-9
http://www.nxtbook.com/allen/avne/51-8
http://www.nxtbook.com/allen/avne/51-7
http://www.nxtbook.com/allen/avne/51-6
http://www.nxtbook.com/allen/avne/51-5
http://www.nxtbook.com/allen/avne/51-4
http://www.nxtbook.com/allen/avne/51-3
http://www.nxtbook.com/allen/avne/51-2
http://www.nxtbook.com/allen/avne/51-1
http://www.nxtbook.com/allen/avne/50-12
http://www.nxtbook.com/allen/avne/50-11
http://www.nxtbook.com/allen/avne/50-10
http://www.nxtbook.com/allen/avne/50-9
http://www.nxtbook.com/allen/avne/50-8
http://www.nxtbook.com/allen/avne/50-7
http://www.nxtbook.com/allen/avne/50-6
http://www.nxtbook.com/allen/avne/50-5
http://www.nxtbook.com/allen/avne/50-4
http://www.nxtbook.com/allen/avne/50-3
http://www.nxtbook.com/allen/avne/50-2
http://www.nxtbook.com/allen/avne/50-1
http://www.nxtbook.com/allen/avne/49-12
http://www.nxtbook.com/allen/avne/49-11
http://www.nxtbook.com/allen/avne/49-10
http://www.nxtbook.com/allen/avne/49-9
http://www.nxtbook.com/allen/avne/49-8
http://www.nxtbook.com/allen/avne/49-7
http://www.nxtbook.com/allen/avne/49-6
http://www.nxtbook.com/allen/avne/49-5
http://www.nxtbook.com/allen/avne/49-4
http://www.nxtbook.com/allen/avne/49-3
http://www.nxtbook.com/allen/avne/49-2
http://www.nxtbook.com/allen/avne/49-1
http://www.nxtbook.com/allen/avne/48-12
http://www.nxtbook.com/allen/avne/48-11
http://www.nxtbookMEDIA.com