| Title | Securing Trajectory based Operations Through a Zero Trust Framework in the NAS |
| Publication Type | Conference Paper |
| Year of Publication | 2020 |
| Authors | Nace, L. |
| Conference Name | 2020 Integrated Communications Navigation and Surveillance Conference (ICNS) |
| Date Published | Sept. 2020 |
| Publisher | IEEE |
| ISBN Number | 978-1-7281-7270-5 |
| Keywords | access network data, aerospace computing, Air traffic control, aircraft communication, authorisation, boundary protections, castle-moat approach, critical data, ever-evolving threat sophistication, FAA systems, FAA Telecommunications Infrastructure network, human factors, hybrid ZTX approach, insider threats, internal network devices, NAS Zero Trust, NAS.ZTF, national airspace system, network perimeter, operating costs, policy-based governance, pubcrawl, resilience, Resiliency, Scalability, strong boundary security protections, TBO infrastructure, TBO objectives, time-based management data, tool availability, trajectory based operations, verify approach, zero trust, zero trust framework, ZTF theory |
| Abstract | Current FAA strategic objectives include a migration to Trajectory Based Operations (TBO) with the integration of time-based management data and tools to increase efficiencies and reduce operating costs within the National Airspace System (NAS). Under TBO, integration across various FAA systems will take on greater importance than ever. To ensure the security of this integration without impacting data and tool availability, the FAA should consider adopting a Zero Trust Framework (ZTF) into the NAS.ZTF was founded on the belief that strong boundary security protections alone (traditionally referred to as the castle-moat approach) were no longer adequate to protecting critical data from outside threats and, with ever-evolving threat sophistication, contamination within a network perimeter is assumed to already exist (see Figure 1).To address this, theorists developed a framework where trust is controlled and applied to all internal network devices, users, and applications in what was termed a "Never Trust; Always Verify" approach to distinguish the authorized from the unauthorized elements wanting to access network data.To secure achievement of TBO objectives and add defensive depth to counter potential insider threats, the FAA must consider implementing a hybrid approach to the ZTF theory. This would include continued use of existing boundary protections provided by the FAA Telecommunications Infrastructure (FTI) network, with the additional strength afforded by the application of ZTF, in what is called the NAS Zero Trust eXtended (ZTX) platform.This paper discusses a proposal to implement a hybrid ZTX approach to securing TBO infrastructure and applications in the NAS. |
| URL | https://ieeexplore.ieee.org/document/9222912 |
| DOI | 10.1109/ICNS50378.2020.9222912 |
| Citation Key | nace_securing_2020 |
Securing Trajectory based Operations Through a Zero Trust Framework in the NAS