4 ms·
> That second barrier, the company argues, allows only data to pass from one part of the network to the other, rather than the executable commands that would be
by sebazzz 7y ago
> That second barrier, the company argues, allows only data to pass from one part of the network to the other, rather than the executable commands that would be necessary to affect the plane's critical systems.
Assuming planes don't use something like CAN-bus but regular TCP protocol, this can't really be true right? Perhaps they talk about which services are allowed to connect (listen for incoming connections).
- p_l 7y agoAFDX protocol stack is unidirectional with no ACKs or anything like that, which makes use of physical data diodes trivial.
- Hunisgung 7y agoThat is false. Apart from the hard-coded and restrictive network configuration, AFDX is basically UDP/IP. There are many uses of bidirectional application protocols (like TFTP).
- p_l 7y agounidirectional nature of the communication protocols means that AFDX-compatible application can be easily firewalled for cases such as reporting data to maintenance network, as I understood from Boeing's response. Electronic Flight Bag being part of maintenance network is not something good, though.