Risk Assessment Planning for Airborne Systems: An Information Assurance Failure Mode, Effects and Criticality Analysis Methodology.

摘要

Increasingly in recent times, aircraft are built with communications links to external participants. These communications links may in some cases be susceptible to degradation or attack, which may then lead to safety of flight or mission effectiveness risks. This project examines risk assessment of the information assurance and security of newly developed airborne systems. First, an investigation of the past failures of the security of other networked systems is examined to give a historical perspective on the likely scope of system security threats and vulnerabilities. Next, risk assessment methods are summarized for current methods of analyzing risk to aircraft and other systems. An information assurance Failure Mode, Effects and Criticality Analysis (FMECA) methodology is presented based on past FMECA methodologies, but with modifications tailored to aircraft systems and the information warfare environment. The FMECA methodology is used to examine system integrity considerations in planning for the development of new military aircraft. A program manager's potential decisions are informed with insights on failure mode risk criticality based on the information assurance FMECA method. Finally, recommendations for follow-on research in the airborne systems information assurance field are detailed.