Method for fullness assessment of requirements fulfillment for civil aviation cybersecurity

2017

Full text Open access: Gold Metadata (CSL-JSON)
DOI 10.18372/2225-5036.23.11825
Data confidence 70 medium
How this score is calculated

It is built from checkable properties of the record itself: whether the article has a DOI, how many independent sources confirmed its data, whether the required fields are filled in, and how recent the latest confirmation is. Disagreement between sources and a missing identifier lower it. A value of 80 or above means the record was published without further checking; 60 to 79 means it is published at reduced confidence, with a manual check advisable. A record verified by an editor by hand is never pushed below 90 by a recalculation. This scores our data about the article, not the article itself.

Abstract

Lately, the leading countries of the world paid more attention to their critical infrastructure cyberdefence. Civil aviation is not an exception. In this area, modern information and communication technologies are widely implemented, so it generates a whole range of new vulnerabilities and potential threats. Known models allow formalizing processes of creating a complete set of requirements (according to relevant guidance documents) that should be done to ensure civil aviation cybersecurity and identifying their execution. However, the issue of fullness assessment of requirements fulfillment remains unresolved. In view of this, in this work a method of estimation is developed, which gives ability to determine the quantitative parameters, that characterized fulfillment of complete set of requirements for civil aviation cybersecurity and differentiated requirements of control authorities in accordance to defined cybersecurity model. This method can be used for fullness evaluation of requirements fulfillment for providing cybersecurity and in other sectors of the critical infrastructure of the state. Later, based on this method, it is planned to develop a software application to support decision-making on expert evaluation of fullness requirements fulfillment for civil aviation cybersecurity.