UPDATE: Zenodo migration postponed to Oct 13 from 06:00-08:00 UTC. Read the announcement.

Conference paper Open Access

Hardening High-Assurance Systems: MILS as Software Design for Avionics

Mueller, Kevin


DCAT Export

<?xml version='1.0' encoding='utf-8'?>
<rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#" xmlns:adms="http://www.w3.org/ns/adms#" xmlns:dc="http://purl.org/dc/elements/1.1/" xmlns:dct="http://purl.org/dc/terms/" xmlns:dctype="http://purl.org/dc/dcmitype/" xmlns:dcat="http://www.w3.org/ns/dcat#" xmlns:duv="http://www.w3.org/ns/duv#" xmlns:foaf="http://xmlns.com/foaf/0.1/" xmlns:frapo="http://purl.org/cerif/frapo/" xmlns:geo="http://www.w3.org/2003/01/geo/wgs84_pos#" xmlns:gsp="http://www.opengis.net/ont/geosparql#" xmlns:locn="http://www.w3.org/ns/locn#" xmlns:org="http://www.w3.org/ns/org#" xmlns:owl="http://www.w3.org/2002/07/owl#" xmlns:prov="http://www.w3.org/ns/prov#" xmlns:rdfs="http://www.w3.org/2000/01/rdf-schema#" xmlns:schema="http://schema.org/" xmlns:skos="http://www.w3.org/2004/02/skos/core#" xmlns:vcard="http://www.w3.org/2006/vcard/ns#" xmlns:wdrs="http://www.w3.org/2007/05/powder-s#">
  <rdf:Description rdf:about="https://doi.org/10.5281/zenodo.571160">
    <dct:identifier rdf:datatype="http://www.w3.org/2001/XMLSchema#anyURI">https://doi.org/10.5281/zenodo.571160</dct:identifier>
    <foaf:page rdf:resource="https://doi.org/10.5281/zenodo.571160"/>
    <dct:creator>
      <rdf:Description>
        <rdf:type rdf:resource="http://xmlns.com/foaf/0.1/Agent"/>
        <foaf:name>Mueller, Kevin</foaf:name>
        <foaf:givenName>Kevin</foaf:givenName>
        <foaf:familyName>Mueller</foaf:familyName>
        <org:memberOf>
          <foaf:Organization>
            <foaf:name>Airbus Operations</foaf:name>
          </foaf:Organization>
        </org:memberOf>
      </rdf:Description>
    </dct:creator>
    <dct:title>Hardening High-Assurance Systems: MILS as Software Design for Avionics</dct:title>
    <dct:publisher>
      <foaf:Agent>
        <foaf:name>Zenodo</foaf:name>
      </foaf:Agent>
    </dct:publisher>
    <dct:issued rdf:datatype="http://www.w3.org/2001/XMLSchema#gYear">2017</dct:issued>
    <dcat:keyword>High-assurance</dcat:keyword>
    <dcat:keyword>MILS</dcat:keyword>
    <dct:issued rdf:datatype="http://www.w3.org/2001/XMLSchema#date">2017-03-14</dct:issued>
    <owl:sameAs rdf:resource="https://zenodo.org/record/571160"/>
    <adms:identifier>
      <adms:Identifier>
        <skos:notation rdf:datatype="http://www.w3.org/2001/XMLSchema#anyURI">https://zenodo.org/record/571160</skos:notation>
        <adms:schemeAgency>url</adms:schemeAgency>
      </adms:Identifier>
    </adms:identifier>
    <dct:isPartOf rdf:resource="https://zenodo.org/communities/mils"/>
    <dct:description>&lt;p&gt;The aviation industry needs to assure the reliable operation of aircrafts. While this reliability has many aspects, this talk focused on the aspect of information technology for the electronic on- and off-board equipment. Modern architectures of avionics, the aircraft's electronic systems, are driven by denser integration into embedded platforms and the interconnection of these systems to each other. In addition, the aircraft's ecosystem demands new connectivity solutions for several stakeholders, e.g. passengers, airlines or air traffic management. This trend of transferring the previously closed, federated systems into interconnected Integrated Modular Avionics offering additional services introduces the potential risk of threads and increased attack surfaces allowing intruders to harm the operation of the aircraft. To counter these threats is challenge for the aviation industry that needs new system design approaches.&lt;br&gt; The concept of Multiple Independent Levels of Security (MILS) can provide such a system design for equipment operating in high-assurance environments. Due to its properties of separation and controlled information flow, MILS is a promising design approach for the secure integration of several systems into one hardware platform. While this idea has been part of research for the last decades, MILS can also be used as software design concept for one embedded system. This approach divides the system under development into several sub-functions that can be implemented and executed inside isolated runtime compartments. Information flows between these compartments are mediated by the MILS platform. This divide-and-conquer approach decouples critical code from less critical code, limits the perimeters of the internal software dependencies and allows a localized verification of sub-functions.&lt;br&gt; This paper presents the general security environment to develop and operate avionics, explains the introduced MILS software design approach in more detail, provides the identified advantages and disadvantages using this concept, and discusses the results of a feasibility study using a common avionic high-assurance system to control the information exchange on security domain borders.&lt;/p&gt;</dct:description>
    <dct:accessRights rdf:resource="http://publications.europa.eu/resource/authority/access-right/PUBLIC"/>
    <dct:accessRights>
      <dct:RightsStatement rdf:about="info:eu-repo/semantics/openAccess">
        <rdfs:label>Open Access</rdfs:label>
      </dct:RightsStatement>
    </dct:accessRights>
    <dct:license rdf:resource="https://creativecommons.org/licenses/by/4.0/legalcode"/>
    <dcat:distribution>
      <dcat:Distribution>
        <dcat:accessURL rdf:resource="https://doi.org/10.5281/zenodo.571160"/>
        <dcat:byteSize>768058</dcat:byteSize>
        <dcat:downloadURL rdf:resource="https://zenodo.org/record/571160/files/Muller2017hardening.pdf"/>
        <dcat:mediaType>application/pdf</dcat:mediaType>
      </dcat:Distribution>
    </dcat:distribution>
  </rdf:Description>
</rdf:RDF>
201
131
views
downloads
All versions This version
Views 201201
Downloads 131131
Data volume 100.6 MB100.6 MB
Unique views 193193
Unique downloads 113113

Share

Cite as