Information for cyber security issues related to aircraft systems REV-A

Existing FAA regulations, policy and guidance do not specifically address cyber security requirements for aircraft networks and systems. This could result in security related certification criteria that are not standardized and harmonized between domestic and international regulatory agencies. This paper identifies cyber security threats and the need to address unauthorized and potentially unsafe electronic access to aircraft systems and networks. Unauthorized access could result in the malicious use of networks, and loss or corruption of data (e.g., software applications, databases, configuration files, etc.) brought about by software worms, viruses or other malicious entities (refer to Figure 1).