美国民航信息安全保障计划研究

The Information Security Assurance of Civil Aviation Information System in the United States

民航信息系统作为国家重要信息系统之一,正面临严峻的安全威胁,为了保障航空交通运输的安全运行,美国联邦航空局(Federal Aviation Administration,FAA)制定了民航信息系统安全(information system security,ISS)计划.针对目前民航信息系统面临的安全威胁,研究了FAA的ISS计划,介绍了ISS的分层模型和核心内容,并对每个层次的要求进行了解释,给出了其信息安全保障措施的建议.

Nowadays, the information security of civil aviation information system is racing a serious threat. In order to protect the safe operation of air transportion, the US Federal Aviation Administration （FAA） developed the civil aviation information system （Information System Security, ISS） program. In this paper, the ISS program of FAA is studied, the hierarchical model and core content of ISS are introduced, and the requirements of each level are explained. Then, the suggestions of information security assurance for civil aviation information system are given.