1 F E D E R A L A V I A T I O N A D M I N I S T R A T I O N A I R T R A F F I C O R G A N I Z A T I O N 1 William J. Hughes FAA Technical Center INFORMATION SECURITY GROUP Vic Patel, FAA/ATO-P AEEC INFORMATION SECURITY WORKING GROUP STATUS ACP WG N4 New Orleans November 2004

2 F E D E R A L A V I A T I O N A D M I N I S T R A T I O N A I R T R A F F I C O R G A N I Z A T I O N 2 AEEC is an association of airlines, organized by ARINC, that develop standards for avionics AEEC has seen increased activity in security over the last few years: ICAO communiqué to AEEC in 2002 concerning need for work on key management for ATN security Desire for ACARS security standards Clear need for security during work to develop standards for ADN (LAN on an aircraft), Gatelink (WLAN from aircraft to airport), and others After a number of ad hoc meetings on security and key management, and a security tutorial given by FAA/ATO-P, ACB-250 at the 2003 AEEC General Session, AEEC formed an Information Security (SEC) WG in 2004 to work these issues. AEEC and Security

3 F E D E R A L A V I A T I O N A D M I N I S T R A T I O N A I R T R A F F I C O R G A N I Z A T I O N 3 AEEC SEC WG seen as a focal point for AEEC security activities across many different applications Airline participation in SEC WG has been high. (This is crucial for success in AEEC.) Initial product of SEC WG will be an Information Security CONOPS for aircraft. FAA/ATO-P, ACB-250 has been asked to lead drafting of security sections of CONOPS. Subsequent work will look at developing standards security tools that can used by many aircraft applications – for an example a key management / PKI standard is being considered. AEEC SEC WG