A security policy framework for eEnabled fleets and airports

The future airport is predicted to be a highly net-centric system-of-systems with advanced networking and wireless technology to accommodate the "eEnabled aircraft," enhanced surface area operations, as well as growing business and societal demands. In this paper, we present a classification of security policies that need to be enforced in such modern airport systems. We propose a distributed architecture for policy-compliance monitoring that enables runtime verification of compliance in the multi-organization environments typical of large-scale infrastructure systems. Compared to current solutions, our monitoring architecture allows each organization to acquire independently information about the state of the infrastructure while respecting integrity, confidentiality, and separation-of-duty constraints that arise because of the interaction between parts of the infrastructure managed by different organizations.