Airbus A350 XWB should be hacker-proof...

[Stratofreighter]

http://www.flightglobal.com/articles/20 ... 0-xwb.html" onclick="window.open(this.href);return false;

DATE:13/05/10

SOURCE:Air Transport Intelligence news

System security is focus for e-enabled A350 XWB

By Mary Kirby

Airbus is focused on ensuring its Airbus A350 XWB is not vulnerable to hackers, and has vocalized some of the burning questions that must be answered as the European company and other airframers bring e-enabled aircraft to market.

In recent years, EASA and the FAA have expressed their concerns regarding security of e-enabled aircraft, such as the A350, A380, Boeing 787 and Boeing 747-8, through certification review items and special conditions.

The main novelty, according to Airbus, is the use of digital system architecture composed of several connected networks/domains - flight safety related control, communication and navigation systems; airline business and administrative support; and passenger information and entertainment - and the concern that these networks may be subject to unauthorised access.

"As a consequence, 'connectivity' has to be taken in a scope wider than only cabin connectivity, including all kinds of communication (ground system to aircraft systems and aircraft systems to aircraft systems)," said Airbus vice-president, cabin design office Jonathan Norris at a recent World Airline Entertainment Association (WAEA) single focus workshop.

While regulators are concerned that unauthorised persons could use in-flight connectivity to hack into onboard systems while physically on board the aircraft, their greater concern is that unauthorised individuals would get into the systems via Gatelink on the ground and load a "false flight management system", says Norris.

On the A350, Airbus will have to demonstrate compliance with CRI F-38, FAA SA-1 and SA-2.

With regard to managing off-board communications, Airbus says the following questions need to be answered:

• Which air-ground (ground-ground) links shall be supported? If this link is shared with cockpit communications, have all necessary studies been done to ensure aircraft performance and security are not affected by such connectivity traffic?

• Are applicable certification rules for new e-enabled aircraft (A350, 787, 747-8) which require segregation between cabin and operational communications met?

To these two points, Airbus has been an advocate for having "a very clean line of segregation", says Norris, noting that "it could be hardware segregation or software segregation".

With respect to managing on-board wireless signals functions, Airbus is asking the following:

• Are the proposed wireless frequencies to be used in line with regulatory standards and Airbus directives?

• Are wireless communications used (or planned to be used) by other maintenance, cabin or cockpit applications.

If the answer is "yes" to this latter question, Airbus wants to ensure that aircraft performance is not affected, and to secure "the evolution and coexistence of several wireless systems on board as well as continuous compliance to regulatory requirements", says Norris.