Unité de Recherche: Laboratoire d’Analyse et d’Architecture des Systèmes (UPR 8001) Directeur(s) de Thèse:

Aeronautics is actually facing a confluence of events: connectivity of aircraft is gradually increasing in order to ease the air traffic management and aircraft fleet maintainability, and to offer new services to passengers while reducing costs. The core avionics functions are thus linked to what we call the Open World, i.e. the non-critical network of an aircraft as well as the air traffic services on the ground. Such recent evolutions could be an open door to cyber-attacks as their complexity keeps growing. However, even if security standards are still under construction, aeronautical certification authorities already require that aircraft manufacturers identify risks and ensure aircraft will remain in a safe and secure state even under threat conditions. To answer this industrial problematic, this thesis first proposes a simple semi-quantitative risk assessment framework to identify threats, assets and vulnerabilities, and then rank risk levels according to threat scenario safety impact on the aircraft and their potential likelihood by using adjustable attribute tables. Then, in order to ensure the aircraft performs securely and safely all along its life-cycle, our second contribution consists in a generic and autonomou