关键词: 机载系统, 安保风险评估, 威胁条件, 风险预测, 安保等级

Abstract: Aimed at the issues of information security threat which impact on safety of commercial aircraft airborne system, this paper proposes a security risk assessment methodology for airborne system by studying ISO/IEC27005 which is a standard for information security management and some relational?aviation industry standards. It is advanced to use threat condition and threat scenario for system vulnerability assessment. Through combining traditional aircraft safety assessment methods and security risk evaluation methods, a set of quantitative risk estimation algorithms is proposed. Through relational matrix the relativity between safety and security level is built, and the basis for system’s requirement and architecture design is provided. According to the case results, the methodology can provide veracity and reliability airborne system security assessment data.

Key words: airborne system, security risk assessment, threat condition, risk estimate, security level