Provisioning for a Distributed ATM Security Management: the GAMMA Approach

Abstract

Future Air Traffic Management (ATM) will become more complex by having a multitude of tightly interconnected systems requiring the exchange of a large amount of information for their secure and timely operation. Interconnecting various ATM systems, could potentially open up the systems to more attacks, thereby increasing vulnerabilities and the overall risk, unless adequate security measures are taken. This necessitates to provision for a security management solution in a multi-national scale, providing the basis for handling security, from identification of security threats to prevention, detection and efficient resolution of the attacks. GAMMA is aimed at providing a holistic vision for this ATM security management and maintaining alignment with ATM developments under SESAR. In this paper, we describe the reference model conceptualizing the principles for ATM security management from GAMMAs perspective. While using the SESAR risk assessment methodology, we extend the scope of threat assessment performed in SESAR to a more comprehensive system of systems level, including all foreseen ATM assets and possible threats. Following the assessment of risks and identifying the course of actions for treatments, the specification of system-level ATM security requirements are conducted that are used to define the NAF3.1 based architectural views from stakeholders perspectives. Overall, this paper highlights the GAMMA contribution in addressing the security challenges and the gaps identified within the ATM environment and demonstrate the feasibility of its security solution.