A Comprehensive Analysis of Cybersecurity Challenges in Self-Adaptive Avionics: A Plug&Fly Avionics Platform Case StudySHORT
Increasing complexity and availability demands of traditional software systems have derived the need for self-adaptive systems. Self-adaptive systems automatically adjust their behavior at runtime to meet objectives. However, these systems accompany additional challenges specially in terms of security. These challenges include interaction with non-trusted entities, widening of attack surface due to multichannel communication, risk of unauthorized and malicious access to operating environment, and potential exploitation of adaptive mechanisms by attackers. Despite the growing adoption of these systems in avionics, comprehensive study on their cybersecurity assessment is missing. To fill the gap, this study discusses various security vulnerabilities introduced with self-adaptivity in avionics. The aim of the study is to use the Plug&Fly Avionics Platform (PAFA) as a case study, and analyze the impact of self-adaptivity in exposing the system to a wide range of cyber threats such as, faulty decision making, compromised reconfigurations, and so on. Besides detailed analysis of security vulnerabilities introduced with self-adaptivity, the paper also proposes some novel mitigation strategies and demonstrate their effectiveness in achieving a cybersecure adaptive system in the context of PAFA. These findings aim to provide solid basis in future research and development towards securing self-adaptive systems, ensuring both their reliability and safety in complex operational environments.
Mon 28 AprDisplayed time zone: Eastern Time (US & Canada) change
11:00 - 12:30 | Session 2: FoundationsArtifact Track / Research Track at 204 Chair(s): Sona Ghahremani Hasso Plattner Institute, University of Potsdam | ||
11:00 25mTalk | Symbolic State Seeding Improves Coverage Of Reinforcement LearningFULL Research Track Mohsen Ghaffari IT University of Copenhagen, Cong Chen IT-University of Copenhagen, Mahsa Varshosaz IT University of Copenhagen, Denmark, Einar Broch Johnsen University of Oslo, Andrzej Wąsowski IT University of Copenhagen, Denmark | ||
11:25 25mTalk | Robust Probabilistic Model Checking with Continuous Reward DomainsFULLBest Student Paper Award Research Track Xiaotong Ji Imperial College London, Hanchun Wang Imperial College London, Antonio Filieri AWS and Imperial College London, Ilenia Epifani Politecnico di Milano | ||
11:50 15mTalk | A Comprehensive Analysis of Cybersecurity Challenges in Self-Adaptive Avionics: A Plug&Fly Avionics Platform Case StudySHORT Research Track Aisha Zahid Junejo Universitat Stuttgart, Mario Werthwein Universitat Stuttgart, Bjoern Annighoefer University of Stuttgart | ||
12:05 15mTalk | ResMetric: Analyzing Resilience to Enable Research on AntifragilityARTIFACT Artifact Track Ferdinand Koenig Humboldt-Universität zu Berlin, Marc Carwehl Humboldt-Universität zu Berlin, Calum Imrie University of York | ||
12:20 10mOther | Discussion Session 2 Research Track |