Zenodo.org will be unavailable for 2 hours on September 29th from 06:00-08:00 UTC. See announcement.

Conference paper Open Access

Hardening High-Assurance Systems: MILS as Software Design for Avionics

Mueller, Kevin


MARC21 XML Export

<?xml version='1.0' encoding='UTF-8'?>
<record xmlns="http://www.loc.gov/MARC21/slim">
  <leader>00000nam##2200000uu#4500</leader>
  <datafield tag="653" ind1=" " ind2=" ">
    <subfield code="a">High-assurance</subfield>
  </datafield>
  <datafield tag="653" ind1=" " ind2=" ">
    <subfield code="a">MILS</subfield>
  </datafield>
  <controlfield tag="005">20200120164505.0</controlfield>
  <controlfield tag="001">571160</controlfield>
  <datafield tag="711" ind1=" " ind2=" ">
    <subfield code="d">14 March 2017</subfield>
    <subfield code="a">International Workshop on MILS: Architecture and Assurance for Secure Systems</subfield>
    <subfield code="c">Nuremberg, Germany</subfield>
  </datafield>
  <datafield tag="856" ind1="4" ind2=" ">
    <subfield code="s">768058</subfield>
    <subfield code="z">md5:650ddc1c94e90ff796913eefe5848005</subfield>
    <subfield code="u">https://zenodo.org/record/571160/files/Muller2017hardening.pdf</subfield>
  </datafield>
  <datafield tag="542" ind1=" " ind2=" ">
    <subfield code="l">open</subfield>
  </datafield>
  <datafield tag="260" ind1=" " ind2=" ">
    <subfield code="c">2017-03-14</subfield>
  </datafield>
  <datafield tag="909" ind1="C" ind2="O">
    <subfield code="p">openaire</subfield>
    <subfield code="p">user-mils</subfield>
    <subfield code="o">oai:zenodo.org:571160</subfield>
  </datafield>
  <datafield tag="100" ind1=" " ind2=" ">
    <subfield code="u">Airbus Operations</subfield>
    <subfield code="a">Mueller, Kevin</subfield>
  </datafield>
  <datafield tag="245" ind1=" " ind2=" ">
    <subfield code="a">Hardening High-Assurance Systems: MILS as Software Design for Avionics</subfield>
  </datafield>
  <datafield tag="980" ind1=" " ind2=" ">
    <subfield code="a">user-mils</subfield>
  </datafield>
  <datafield tag="540" ind1=" " ind2=" ">
    <subfield code="u">https://creativecommons.org/licenses/by/4.0/legalcode</subfield>
    <subfield code="a">Creative Commons Attribution 4.0 International</subfield>
  </datafield>
  <datafield tag="650" ind1="1" ind2="7">
    <subfield code="a">cc-by</subfield>
    <subfield code="2">opendefinition.org</subfield>
  </datafield>
  <datafield tag="520" ind1=" " ind2=" ">
    <subfield code="a">&lt;p&gt;The aviation industry needs to assure the reliable operation of aircrafts. While this reliability has many aspects, this talk focused on the aspect of information technology for the electronic on- and off-board equipment. Modern architectures of avionics, the aircraft's electronic systems, are driven by denser integration into embedded platforms and the interconnection of these systems to each other. In addition, the aircraft's ecosystem demands new connectivity solutions for several stakeholders, e.g. passengers, airlines or air traffic management. This trend of transferring the previously closed, federated systems into interconnected Integrated Modular Avionics offering additional services introduces the potential risk of threads and increased attack surfaces allowing intruders to harm the operation of the aircraft. To counter these threats is challenge for the aviation industry that needs new system design approaches.&lt;br&gt;
The concept of Multiple Independent Levels of Security (MILS) can provide such a system design for equipment operating in high-assurance environments. Due to its properties of separation and controlled information flow, MILS is a promising design approach for the secure integration of several systems into one hardware platform. While this idea has been part of research for the last decades, MILS can also be used as software design concept for one embedded system. This approach divides the system under development into several sub-functions that can be implemented and executed inside isolated runtime compartments. Information flows between these compartments are mediated by the MILS platform. This divide-and-conquer approach decouples critical code from less critical code, limits the perimeters of the internal software dependencies and allows a localized verification of sub-functions.&lt;br&gt;
This paper presents the general security environment to develop and operate avionics, explains the introduced MILS software design approach in more detail, provides the identified advantages and disadvantages using this concept, and discusses the results of a feasibility study using a common avionic high-assurance system to control the information exchange on security domain borders.&lt;/p&gt;</subfield>
  </datafield>
  <datafield tag="024" ind1=" " ind2=" ">
    <subfield code="a">10.5281/zenodo.571160</subfield>
    <subfield code="2">doi</subfield>
  </datafield>
  <datafield tag="980" ind1=" " ind2=" ">
    <subfield code="a">publication</subfield>
    <subfield code="b">conferencepaper</subfield>
  </datafield>
</record>
200
131
views
downloads
All versions This version
Views 200200
Downloads 131131
Data volume 100.6 MB100.6 MB
Unique views 192192
Unique downloads 113113

Share

Cite as