Avionic networks use various Ethernet-based network protocols, including Ethernet according to IEEE 802.3, ARINC 664 communication and time-triggered communication according to the SAE AS6802A standard. The aim of this work is to determine the security threats of these protocols and compare their security strengths and weaknesses. Based on these findings, technical security measures are developed to improve their security. In this paper, STRIDE is used as a threat modeling method to identify security threats. Data flow diagrams are created for each of the three network protocols to model the system. A total of 45 threats are identified, these can be broken down into 33 threats affecting standard IEEE 802.3 Ethernet networks, 26 threats for ARINC 664 networks and 37 threats for time-triggered AS6802A networks. This paper proposes eleven security measures, which can mitigate 27 (60%) of the identified 45 threats.


    Access

    Check access

    Check availability in my library

    Order at Subito €


    Export, share and cite



    Title :

    Threat Modeling and Security Improvements for Ethernet-Based Avionic Networks


    Contributors:


    Publication date :

    2024-09-29


    Size :

    199526 byte





    Type of media :

    Conference paper


    Type of material :

    Electronic Resource


    Language :

    English



    Power-over-Ethernet for Avionic Networks

    Heller, C. / Heidinger, E. / Schneele, S. et al. | Tema Archive | 2010


    Power-over-Ethernet for avionic networks

    Heller, C / Heidinger, E / Schneele, S et al. | IEEE | 2010



    EMC Investigations on Ethernet Link for Avionic Application

    Perraud, R. / Marot, C. / Martins, G. et al. | IEEE | 2019


    Information security in integrated avionic systems

    Gibbons, W.E. | Tema Archive | 1989