Review of web applications security and intrusion detection in air traffic control systems : Federal Aviation Administration.

Format:

Book

Government document

Author/Creator:

United States. Department of Transportation. Office of Inspector General

Language:

English

Subjects (All):

United States. Federal Aviation Administration--Evaluation.

United States.

United States. Federal Aviation Administration.

Air traffic control--United States--Automation--Evaluation.

Air traffic control.

Evaluation.

Air traffic control--Automation--Evaluation.

Physical Description:

1 online resource (19, [3] pages) : color illustrations

Place of Publication:

[Washington, D.C.] : U.S. Dept. of Transportation, Office of the Secretary of Transportation, Office of Inspector General, [2009]

Summary:

This report presents the results of our audit of Web applications security and intrusion detection in air traffic control (ATC) systems. This audit was requested by the Ranking Minority members of the House Committee on Transportation and Infrastructure and its Aviation Subcommittee. Homeland Security Presidential Directive (HSPD)7 designates air traffic control systems as part of the Nation's critical infrastructure due to the important role commercial aviation plays in fostering and sustaining the national economy and ensuring citizens safety and mobility. Essentially, HSPD-7 requires the Secretary of Transportation to ensure that the ATC system is protected from both physical and cyber security threats to prevent disruptions in air travel and commerce. The need to protect ATC systems from cyber attacks requires enhanced attention because the Federal Aviation Administration (FAA) has increasingly turned toward the use of commercial software and Internet Protocol (IP)1-based technologies to modernize ATC systems. While use of commercial IP products, such as Web applications, has enabled FAA to efficiently collect and disseminate information to facilitate ATC services, it inevitably poses a higher security risk to ATC systems than when they were developed primarily with proprietary software.

Notes:

Title from title screen (viewed on Feb. 11, 2012).

"Date issued : May 4, 2009."

"Report Number : FI-2009-049."

OCLC:

403835405