Integration of Cybersecurity and Safety: DO-326A with DP-297, DO-178C & DO-254 Fundamentals Training by Tonex
This advanced 2-day course provides a deep dive into the integration of cybersecurity and safety assurance within avionics systems, focusing on harmonizing compliance with DO-326A, DO-178C, DO-254, and DP-297. Participants will learn how to assess and manage cybersecurity risks without compromising system safety or certification requirements. The training highlights the dual assurance approach, where safety (DAL) and security (SL) co-exist, and examines how safety cases are affected by cybersecurity mechanisms like secure boot and partitioning. Emphasis is placed on ensuring avionics hardware and software are developed to be both cyber-resilient and safety-compliant.
Audience:
- Safety Engineers
- Cybersecurity Engineers
- Cybersecurity Professionals
- Avionics Software Developers
- Avionics Hardware Developers
- Aerospace Systems Engineers
Learning Objectives:
- Understand the fundamental differences and interactions between safety and cybersecurity in avionics
- Align system development with DO-178C, DO-254, and DO-326A compliance
- Explore assurance levels: Design Assurance Level (DAL) vs. Security Level (SL)
- Identify and mitigate the impact of cybersecurity features on system safety cases
- Incorporate trusted computing techniques in safety-critical environments
- Design system architectures that support both safety and cybersecurity requirements
Course Modules:
Module 1: Cybersecurity vs. Safety
- Define safety-critical and security-critical systems
- Examine differences in failure modes vs. threat models
- Explore regulatory frameworks for safety and cybersecurity
- Contrast safety assurance vs. security assurance
- Identify convergence points of safety and security
- Discuss historical incidents and lessons learned
Module 2: Assurance Levels: DAL and SL
- Introduction to Design Assurance Levels (DAL A–E)
- Overview of Security Levels (SL 1–4) under DO-326A
- Compare certification processes for DAL and SL
- Analyze coexistence of assurance levels in development
- Implications of misalignment between DAL and SL
- Guidelines for harmonizing dual assurance flows
Module 3: Cybersecurity’s Impact on Safety Cases
- Understand the structure of a safety case
- Evaluate how security features affect safety arguments
- Integrate cyber risk into safety assessments
- Consider cascading effects of cyber events on safety
- Ensure traceability between safety and security claims
- Use supporting documentation for combined certification
Module 4: Secure Software and Hardware Functions
- Identify security-related software components
- Address challenges in secure software updates
- Incorporate secure hardware design principles
- Examine verification and validation for secure components
- Maintain integrity in mixed-criticality systems
- Ensure configuration control across lifecycle stages
Module 5: Trusted Computing in Avionics
- Understand secure boot and its safety implications
- Apply principles of trusted execution environments
- Manage cryptographic key provisioning securely
- Evaluate tamper resistance and fault tolerance
- Implement trusted platform modules (TPMs)
- Address recovery and re-authentication protocols
Module 6: System Partitioning & Redundancy
- Apply ARINC 653-based partitioning principles
- Isolate security functions from safety-critical tasks
- Design redundancy for cyber-resilient architectures
- Address side-channel attack mitigation in redundancy
- Evaluate timing and memory partitioning in IMA
- Ensure safe fallback behavior under cyber attack
Join Tonex’s Integration of Cybersecurity and Safety: DO-326A with DP-297, DO-178C & DO-254 Fundamentals Training to gain essential skills in developing and certifying avionics systems that meet the highest standards of both safety and cybersecurity. Learn from industry experts, bridge engineering silos, and position yourself at the forefront of secure avionics innovation. Register now to safeguard the skies with compliant, resilient systems.