Research On Security Evaluation Of Civil Aviation In-flight Entertainment System

In-flight Entertainment System(IFE)is an system that is equipped in the aircraft cabin to meet passengers' entertainment needs.It provides functions such as music and video on demand,shopping,reading,and Internet access.In recent years,cyber attacks against on-board networks have begun to take shape,and also many kinds of attack methods were created.If criminals attack an IFE system,this may lead to aircraft hijacked and other serious aviation safety incidents.Therefore,discovering the security risks faced by the IFE systems and comprehensively improving the security level of it is an urgent problem to be solved in the field of civil aviation.This article aims to evaluate the security level of IFE systems.The main tasks as follows:A study on the security assessment of IFE systems was proposed.Investigated the network architecture of IFE systems in typical aircraft models,combined airline industry standards and general system security risk assessment standards to discovery IFE system's vulnerability,security threats,and potential security risks,developed applicable security assessment methods for IFE systems.An index data fusion algorithm based on fuzzy theory and D-S evidence theory is proposed.Through the vulnerability and threat analysis of the IFE systems,three security attribute indicators are set for the threat and sent to the expert group to determine their value.Fuzzy theory membership function is used to determine the degree that each expert's evaluation opinion belongs to each evaluation level.Then the data is allocated as the basic probability required by the DS evidence theory.Finally,the fused probability distribution is obtained,and the indicator value is reasonably determined.An attack tree model based on fuzzy analytic hierarchy process is proposed.An attack tree is used to establish a threat scene model for an IFE system,and threats with three security attribute indicators were taken as leaf nodes of the attack tree.At the same time,using Fuzzy Analytic Hierarchy Process(FAHP)to determine the weight of each security attribute indicator,finally calculate the probability of attack events and attack paths,predict the risks existing in the system,and reflect the level of system security and propose corresponding rectifiable suggestions with high credibility.