Cyber security of current and future aircraft

该项目旨在为飞机提供新一代创新和先进的特定领域网络安全和网络防御措施。 该研究将采用人工智能（AI）工具，如知识表示技术（本体）和机器学习（ML）方法，以解决当前和未来飞机系统架构的安全性，并确保飞机的持续适航性，同时考虑新的和不断变化的网络威胁。该研究小组将由Polytechnique领导，并将包括来自国际航空运输协会（IATA）和女王大学的成员。行业合作伙伴包括来自航空航天行业的各种跨部门成员（庞巴迪和柯林斯航空航天）以及来自网络安全行业的具有航空经验的成员（RHEA集团，Carillon和QoHash）。该项目包括两个主题。主题1侧重于现有飞机的网络安全，并将产生可在现有飞机上部署的安全对策原型。这些原型将在一个合适的共同仿真环境中进行概念验证实验，其中有人类，即飞行员和空中交通管制员。主题2涉及未来飞机的安全性。该研究将首先侧重于研究与使用新颖和不寻常的设计特征以及采用未来航空操作模式有关的风险，特别是减少机组人员操作（RCO）和单一飞行员操作（SPO）。主题2将为未来的运营模式提供全面的风险评估，为新架构中的入侵检测系统提供原型，并为未来飞机的网络安全评估和认证提供具体的方法。

The aim of this project is to provide a new generation of innovative and advanced domain-specific cybersecurity and cyber defence measures for aircraft. The research will employ Artificial Intelligence (AI) tools such as knowledge representation techniques (ontologies) and Machine Learning (ML) approaches to address the security of current and future aircraft system architectures, and ensure the continued airworthiness of the aircraft while accounting for new and evolving cyber threats. The research team will be led by Polytechnique and will involve members from the International Air Transport Association (IATA) and Queen's University. The industrial partners include various cross-sectoral members from the aerospace industry (Bombardier and Collins Aerospace) and from the cybersecurity industry with previous experience in aviation (RHEA Group, Carillon and QoHash). The project comprises two themes. Theme 1 focuses on the cybersecurity of existing aircraft and will produce prototypes of security counter-measures that could be deployed on existing aircraft. These prototypes will be tested in proof-of-concept experiments conducted in a suitable co-emulation environment with the presence of humans, i.e. pilots and air traffic controllers. Theme 2 addresses the security of future aircraft. The research will first focus on studying the risks related to the use of novel and unusual design features and the adoption of future modes of operation in aviation, notably Reduced Crew Operations (RCO) and Single Pilot Operations (SPO). Theme 2 will produce a holistic risk assessments for future operational modes, a prototype for intrusion detection system in new architectures and a concrete methodology for cybersecurity evaluation and certification of future aircraft.