Cyber Security for Aeronautical Networked Platforms - What does it mean to me in commercial aviation design?

Cyber attacks and cyber security are in the world news every day. Systems controlled by embedded computers (Cyber-Physical System or CPS) are increasingly featured as being at risk, with concern continually expressed over the vulnerability of critical infrastructure to damage and disruption from attacks over networks. Digital control systems in aircraft are also CPS, and are likewise the subject of concern. Both FAA and EASA have created regulations (Special Conditions) specifically to address such concerns, and RTCA and EUROCAE have published process guidances. These guidances are expected to ultimately establish standards of practice for regulators and the industry to develop and certify aircraft for which network security is a requirement. However, the implications to project costs and schedules, designs, and the practical aspects of implementation remain largely unknown to aircraft system designers. This paper provides a practical understanding of how cyber security impacts airplane computer system design, in the presence of existing safety, development, and certification requirements and processes.