Special Conditions: Boeing Model 747-8/-8F Airplanes, Systems and Data Networks Security-Protection of Airplane Systems and Data Networks From Unauthorized External Access, 50926-50928 [E9-23753]
Download as PDF
50926
Proposed Rules
Federal Register
Vol. 74, No. 190
Friday, October 2, 2009
This section of the FEDERAL REGISTER
contains notices to the public of the proposed
issuance of rules and regulations. The
purpose of these notices is to give interested
persons an opportunity to participate in the
rule making prior to the adoption of the final
rules.
FEDERAL HOUSING FINANCE BOARD
12 CFR Parts 985 and 989
FEDERAL HOUSING FINANCE
AGENCY
12 CFR Parts 1273 and 1274
RIN 2590–AA30
Board of Directors of Federal Home
Loan Bank System Office of Finance
pwalker on DSK8KYBLC1PROD with PROPOSALS
AGENCY: Federal Housing Finance
Agency, Federal Housing Finance
Board.
ACTION: Notice of proposed rulemaking;
extension of comment period.
SUMMARY: Governed by the Federal
Housing Finance Agency’s (FHFA)
regulations, the Federal Home Loan
Bank System’s (System) Office of
Finance (OF), issues debt (‘‘consolidated
obligations’’) on which the Federal
Home Loan Banks (Banks) are jointly
and severally liable and publishes
combined financial reports on the
Banks. The OF is governed by a board
of directors, the composition and
functions of which are determined by
FHFA’s regulations. The FHFA’s
experience with the System and with
the OF’s combined financial reports
during the recent period of market stress
suggests that the OF and the System
could benefit from a reconstituted and
strengthened board. Consequently, the
FHFA published a proposed regulation
for comment on August 4, 2009, which
was intended to achieve that end. The
proposal had a comment period of 60
days, but the FHFA has decided to
extend the comment period an
additional 30 days.
DATES: Comments on the proposed
regulation must be received on or before
November 4, 2009. For additional
information, see SUPPLEMENTARY
INFORMATION.
You may submit your
comments on the proposed regulation,
identified by regulatory information
ADDRESSES:
VerDate Nov<24>2008
16:38 Oct 01, 2009
Jkt 220001
number (RIN) 2590–AA30 by any of the
following methods:
• E-mail: Comments to Alfred M.
Pollard, General Counsel may be sent by
e-mail at RegComments@FHFA.gov.
Please include ‘‘RIN 2590–AA30’’ in the
subject line of the message.
• Federal eRulemaking Portal: https://
www.regulations.gov. Follow the
instructions for submitting comments. If
you submit your comment to the
Federal eRulemaking Portal, please also
send it by e-mail to FHFA at
regcomments@fhfa.gov to ensure timely
receipt by the agency.
• U.S. Mail, United Parcel Service,
Federal Express, or Other Mail Service:
The mailing address for comments is:
Alfred M. Pollard, General Counsel,
Attention: Comments/RIN 2590–AA30,
Federal Housing Finance Agency,
Fourth Floor, 1700 G Street, NW.,
Washington, DC 20552.
• Hand Delivery/Courier: The hand
delivery address is: Alfred M. Pollard,
General Counsel, Attention: Comments/
RIN 2590–AA30, Federal Housing
Finance Agency, Fourth Floor, 1700 G
Street, NW., Washington, DC 20552. The
package should be logged at the Guard
Desk, First Floor, on business days
between 9 a.m. and 5 p.m.
FOR FURTHER INFORMATION CONTACT:
Joseph A. McKenzie, 202–408–2845,
Division of Federal Home Loan Bank
Regulation, Federal Housing Finance
Agency, 1625 Eye Street, NW.,
Washington, DC 20006; or Neil Crowley,
Deputy General Counsel, 202–343–1316,
or Thomas E. Joseph, Senior AttorneyAdvisor, 202–414–3095 (not toll-free
numbers), Office of General Counsel,
Federal Housing Finance Agency,
Fourth Floor, 1700 G Street, NW.,
Washington, DC 20552. The telephone
number for the Telecommunications
Device for the Deaf is 800–877–8339.
SUPPLEMENTARY INFORMATION: On August
4, 2009, the FHFA published for
comment in the Federal Register a
proposed regulation to reconstitute and
strengthen the board of directors of the
OF. See 74 FR 38564 (August 4, 2009).
The comment period for the proposed
rule was originally to close on October
5, 2009, but the FHFA believes that
allowing additional time for comments
would benefit the agency. The comment
period is, therefore, being extended an
additional 30 days until November 4,
2009.
PO 00000
Frm 00001
Fmt 4702
Sfmt 4702
The FHFA invites comments on all
aspects of the proposed regulation, and
will adopt a final regulation with
appropriate changes after taking all
comments into consideration. Copies of
all comments will be posted on the
Internet Web site at https://
www.fhfa.gov. In addition, copies of all
comments received will be available for
examination by the public on business
days between the hours of 10 a.m. and
3 p.m., at the Federal Housing Finance
Agency, Fourth Floor, 1700 G Street,
NW., Washington, DC 20552. To make
an appointment to inspect comments,
please call the Office of General Counsel
at 202–414–6924.
Dated: September 29, 2009.
Edward J. DeMarco,
Acting Director, Federal Housing Finance
Agency.
[FR Doc. E9–23821 Filed 10–1–09; 8:45 am]
BILLING CODE 8070–01–P
DEPARTMENT OF TRANSPORTATION
Federal Aviation Administration
14 CFR Part 25
[Docket No. NM413 Special Conditions No.
25–09–09–SC]
Special Conditions: Boeing Model
747–8/–8F Airplanes, Systems and
Data Networks Security—Protection of
Airplane Systems and Data Networks
From Unauthorized External Access
AGENCY: Federal Aviation
Administration (FAA), DOT.
ACTION: Notice of proposed special
conditions.
SUMMARY: This action proposes special
conditions for the Boeing Model 747–8/
–8F airplane. This airplane will have
novel or unusual design features
associated with the architecture and
connectivity capabilities of the
airplane’s computer systems and
networks, which may allow access to
external computer systems and
networks. Connectivity to external
systems and networks may result in
security vulnerabilities to the airplane’s
systems. The applicable airworthiness
regulations do not contain adequate or
appropriate safety standards for these
design features. These proposed special
conditions contain the additional safety
standards that the Administrator
E:\FR\FM\02OCP1.SGM
02OCP1
Federal Register / Vol. 74, No. 190 / Friday, October 2, 2009 / Proposed Rules
considers necessary to establish a level
of safety equivalent to that established
by the existing airworthiness standards.
DATES: Comments must be received on
or before November 2, 2009.
Comments on this proposal
may be mailed in duplicate to: Federal
Aviation Administration, Transport
Airplane Directorate, Attention: Rules
Docket (ANM–113), Docket No. NM413,
1601 Lind Avenue, SW., Renton,
Washington 98057–3356; or delivered in
duplicate to the Transport Airplane
Directorate at the above address. All
comments must be marked Docket No.
NM413. Comments may be inspected in
the Rules Docket weekdays, except
Federal holidays, between 7:30 a.m. and
4 p.m.
ADDRESSES:
FOR FURTHER INFORMATION CONTACT: Will
Struck, FAA, Airplane and Flight Crew
Interface Branch, ANM–111, Transport
Airplane Directorate, 1601 Lind
Avenue, SW., Renton, Washington
98057–3356; telephone (425) 227–2764;
facsimile (425) 227–1149.
SUPPLEMENTARY INFORMATION:
pwalker on DSK8KYBLC1PROD with PROPOSALS
Comments Invited
The FAA invites interested persons to
participate in this rulemaking by
submitting written comments, data, or
views. The most helpful comments
reference a specific portion of the
special conditions, explain the reason
for any recommended change, and
include supporting data. We ask that
you send us two copies of written
comments.
We will file in the docket all
comments we receive as well as a report
summarizing each substantive public
contact with FAA personnel concerning
these proposed special conditions. The
docket is available for public inspection
before and after the comment closing
date. If you wish to review the docket
in person, go to the address in the
ADDRESSES section of this notice
between 7:30 a.m. and 4 p.m., Monday
through Friday, except Federal holidays.
We will consider all comments we
receive on or before the closing date for
comments. We will consider comments
filed late if it is possible to do so
without incurring expense or delay. We
may change the proposed special
conditions based on comments we
receive.
If you want the FAA to acknowledge
receipt of your comments on this
proposal, include with your comments
a pre-addressed, stamped postcard on
which the docket number appears. We
will stamp the date on the postcard and
mail it back to you.
VerDate Nov<24>2008
16:38 Oct 01, 2009
Jkt 220001
Background
On November 4, 2005, The Boeing
Company, P.O. Box 3707, Seattle, WA
98124, applied for an amendment to
Type Certificate Number A20WE to
include the new Model 747–8 passenger
airplane and the new Model 747–8F
freighter airplane. The Model 747–8 and
the Model 747–8F are derivatives of the
747–400 and the 747–400F,
respectively. Both the Model 747–8 and
the Model 747–8F are four-engine jet
transport airplanes that will have a
maximum takeoff weight of 975,000
pounds and new General Electric GEnx
–2B67 engines. The Model 747–8 will
have 2 flight crews and the capacity to
carry 660 passengers. The Model 747–
8F will have 2 flight crews and a zero
passenger capacity, although Boeing has
submitted a petition for exemption to
allow the carriage of supernumeraries.
The maximum takeoff weight will be
975,000 with up to eight
supernumeraries for the 747–8F.
Type Certification Basis
Under the provisions of Title 14, Code
of Federal Regulations (14 CFR) 21.17,
Boeing must show that the Model
747–8 and 747–8F (hereafter referred as
747–8/–8F) meet the applicable
provisions of part 25, as amended by
Amendments 25–1 through 25–120,
except for §§ 25.809(a) and 25.812,
which will remain at Amendment 25–
115. These regulations will be
incorporated into Type Certificate No.
A20WE after type certification approval
of the 747–8/–8F.
In addition, the certification basis
includes other regulations, special
conditions and exemptions that are not
relevant to these proposed special
conditions.
If the Administrator finds that the
applicable airworthiness regulations
(i.e., 14 CFR part 25) do not contain
adequate or appropriate safety standards
for the 747–8/–8F because of a novel or
unusual design feature, special
conditions are prescribed under the
provisions of § 21.16.
In addition to the applicable
airworthiness regulations and special
conditions, the 747–8/–8F must comply
with the fuel vent and exhaust emission
requirements of 14 CFR part 34 and the
noise certification requirements of 14
CFR part 36.
Special conditions, as defined in
§ 11.19, are issued under § 11.38, and
become part of the type certification
basis under § 21.101.
Special conditions are initially
applicable to the model for which they
are issued. Should the type certificate
for that model be amended later to
PO 00000
Frm 00002
Fmt 4702
Sfmt 4702
50927
include any other model that
incorporates the same or similar novel
or unusual design feature, or should any
other model already included on the
same type certificate be modified to
incorporate the same or similar novel or
unusual design feature, the special
conditions would also apply to the other
model under § 21.101.
Novel or Unusual Design Features
The Boeing Model 747–8/–8F airplane
will incorporate the following novel or
unusual design features: Digital systems
architecture composed of several
connected networks. The proposed
architecture and network configuration
may be used for, or interfaced with, a
diverse set of functions, including:
1. Flight-safety related control,
communication, and navigation systems
(aircraft control domain),
2. Airline business and administrative
support (airline information domain),
3. Passenger information and
entertainment systems (passenger
entertainment domain), and
4. The capability to allow access to or
by external network sources.
Discussion
The proposed Model 747–8/–8F
architecture and network configuration
may allow increased connectivity to and
access from external network sources
and airline operations and maintenance
networks to the aircraft control domain
and airline information domain. The
aircraft control domain and airline
information domain perform functions
required for the safe operation and
maintenance of the airplane. Previously
these domains had very limited
connectivity with external network
sources.
The architecture and network
configuration may allow the
exploitation of network security
vulnerabilities resulting in intentional
or unintentional destruction, disruption,
degradation, or exploitation of data,
systems, and networks critical to the
safety and maintenance of the airplane.
The existing regulations and guidance
material did not anticipate these types
of airplane system architectures.
Furthermore, 14 CFR regulations and
current system safety assessment policy
and techniques do not address potential
security vulnerabilities, which could be
exploited by unauthorized access to
airplane networks, data buses, and
servers. Therefore, these special
conditions and a means of compliance
are proposed to ensure that the security
(i.e., confidentiality, integrity, and
availability) of airplane systems is not
compromised by unauthorized wired or
wireless electronic connections.
E:\FR\FM\02OCP1.SGM
02OCP1
50928
Federal Register / Vol. 74, No. 190 / Friday, October 2, 2009 / Proposed Rules
Applicability
DEPARTMENT OF TRANSPORTATION
As discussed above, these proposed
special conditions are applicable to
Boeing Model 747–8/–8F airplanes.
Should Boeing apply at a later date for
a change to the type certificate to
include another model incorporating the
same novel or unusual design features,
these proposed special conditions
would apply to that model as well
under the provisions of § 21.101.
Federal Aviation Administration
Conclusion
This action affects only certain novel
or unusual design features of the Boeing
Model 747–8/–8F airplane. It is not a
rule of general applicability.
List of Subjects in 14 CFR Part 25
Aircraft, Aviation safety, Reporting
and recordkeeping requirements.
The authority citation for these
Special Conditions is as follows:
Authority: 49 U.S.C. 106(g), 40113, 44701,
44702, 44704.
The Proposed Special Conditions
Accordingly, the Federal Aviation
Administration (FAA) proposes the
following special conditions as part of
the type certification basis for the
Boeing Model 747–8/–8F airplane.
1. The applicant must ensure
electronic system security protection for
the aircraft control domain and airline
information domain from access by
unauthorized sources external to the
airplane, including those possibly
caused by maintenance activity.
2. The applicant must ensure that
electronic system security threats from
external sources are identified and
assessed, and that effective electronic
system security protection strategies are
implemented to protect the airplane
from all adverse impacts on safety,
functionality, and continued
airworthiness.
pwalker on DSK8KYBLC1PROD with PROPOSALS
Issued in Renton, Washington, on
September 23, 2009.
Jeffrey E. Duven,
Acting Manager, Transport Airplane
Directorate, Aircraft Certification Service.
[FR Doc. E9–23753 Filed 10–1–09; 8:45 am]
BILLING CODE 4910–13–P
VerDate Nov<24>2008
16:38 Oct 01, 2009
Jkt 220001
14 CFR Part 71
[Docket No. FAA–2009–0704; Airspace
Docket No. 09–ANM–9]
Proposed Amendment to Class E
Airspace; Riverton, WY
AGENCY: Federal Aviation
Administration (FAA), DOT.
ACTION: Notice of proposed rulemaking.
SUMMARY: This action proposes to
amend Class E airspace at Riverton
Regional Airport, Riverton, WY.
Additional controlled airspace is
necessary to accommodate aircraft using
the VHF Omni-Directional Radio Range
(VOR), Area Navigation (RNAV) Global
Positioning System (GPS) Standard
Instrument Approach Procedure (SIAP)
at Riverton Regional Airport, Riverton,
WY. This will improve the safety of
Instrument Flight Rules (IFR) aircraft
executing the VOR (RNAV) GPS (SIAP)
at Riverton Regional Airport, Riverton,
WY.
DATES: Comments must be received on
or before November 16, 2009.
ADDRESSES: Send comments on this
proposal to the U.S. Department of
Transportation, Docket Operations,
M–30, West Building Ground Floor,
Room W12–140, 1200 New Jersey
Avenue, SE., Washington, DC 20590.
Telephone (202) 366–9826.
You must identify FAA Docket No.
FAA–2009–0704; Airspace Docket No.
09–ANM–9, at the beginning of your
comments. You may also submit
comments through the Internet at
https://www.regulations.gov.
FOR FURTHER INFORMATION CONTACT:
Eldon Taylor, Federal Aviation
Administration, Operations Support
Group, Western Service Center, 1601
Lind Avenue, SW., Renton, WA 98057;
telephone (425) 203–4537.
SUPPLEMENTARY INFORMATION:
Comments Invited
Interested parties are invited to
participate in this proposed rulemaking
by submitting such written data, views,
or arguments, as they may desire.
Comments that provide the factual basis
supporting the views and suggestions
presented are particularly helpful in
developing reasoned regulatory
decisions on the proposal. Comments
are specifically invited on the overall
regulatory, aeronautical, economic,
environmental, and energy-related
aspects of the proposal.
Communications should identify both
docket numbers (FAA Docket No. FAA
PO 00000
Frm 00003
Fmt 4702
Sfmt 4702
2009–0704 and Airspace Docket No. 09–
ANM–9) and be submitted in triplicate
to the Docket Management System (see
ADDRESSES section for address and
phone number). You may also submit
comments through the Internet at
https://www.regulations.gov.
Commenters wishing the FAA to
acknowledge receipt of their comments
on this action must submit with those
comments a self-addressed stamped
postcard on which the following
statement is made: ‘‘Comments to FAA
Docket No. FAA–2009–0704 and
Airspace Docket No. 09–ANM–9’’. The
postcard will be date/time stamped and
returned to the commenter.
All communications received on or
before the specified closing date for
comments will be considered before
taking action on the proposed rule. The
proposal contained in this action may
be changed in light of comments
received. All comments submitted will
be available for examination in the
public docket both before and after the
closing date for comments. A report
summarizing each substantive public
contact with FAA personnel concerned
with this rulemaking will be filed in the
docket.
Availability of NPRMs
An electronic copy of this document
may be downloaded through the
Internet at https://www.regulations.gov.
Recently published rulemaking
documents can also be accessed through
the FAA’s Web page at https://
www.faa.gov/airports_airtraffic/
air_traffic/publications/
airspace_amendments/.
You may review the public docket
containing the proposal, any comments
received, and any final disposition in
person in the Dockets Office (see the
ADDRESSES section for the address and
phone number) between 9 a.m. and 5
p.m., Monday through Friday, except
Federal holidays. An informal docket
may also be examined during normal
business hours at the Northwest
Mountain Regional Office of the Federal
Aviation Administration, Air Traffic
Organization, Western Service Area,
Operations Support Group, 1601 Lind
Avenue, SW., Renton, WA 98057.
Persons interested in being placed on
a mailing list for future NPRM’s should
contact the FAA’s Office of Rulemaking,
(202) 267–9677, for a copy of Advisory
Circular No. 11–2A, Notice of Proposed
Rulemaking Distribution System, which
describes the application procedure.
The Proposal
The FAA is proposing an amendment
to Title 14 Code of Federal Regulations
(14 CFR) part 71 by modifying Class E
E:\FR\FM\02OCP1.SGM
02OCP1
Agencies
[Federal Register Volume 74, Number 190 (Friday, October 2, 2009)]
[Proposed Rules]
[Pages 50926-50928]
From the Federal Register Online via the Government Printing Office [www.gpo.gov]
[FR Doc No: E9-23753]
=======================================================================
-----------------------------------------------------------------------
DEPARTMENT OF TRANSPORTATION
Federal Aviation Administration
14 CFR Part 25
[Docket No. NM413 Special Conditions No. 25-09-09-SC]
Special Conditions: Boeing Model 747-8/-8F Airplanes, Systems and
Data Networks Security--Protection of Airplane Systems and Data
Networks From Unauthorized External Access
AGENCY: Federal Aviation Administration (FAA), DOT.
ACTION: Notice of proposed special conditions.
-----------------------------------------------------------------------
SUMMARY: This action proposes special conditions for the Boeing Model
747-8/-8F airplane. This airplane will have novel or unusual design
features associated with the architecture and connectivity capabilities
of the airplane's computer systems and networks, which may allow access
to external computer systems and networks. Connectivity to external
systems and networks may result in security vulnerabilities to the
airplane's systems. The applicable airworthiness regulations do not
contain adequate or appropriate safety standards for these design
features. These proposed special conditions contain the additional
safety standards that the Administrator
[[Page 50927]]
considers necessary to establish a level of safety equivalent to that
established by the existing airworthiness standards.
DATES: Comments must be received on or before November 2, 2009.
ADDRESSES: Comments on this proposal may be mailed in duplicate to:
Federal Aviation Administration, Transport Airplane Directorate,
Attention: Rules Docket (ANM-113), Docket No. NM413, 1601 Lind Avenue,
SW., Renton, Washington 98057-3356; or delivered in duplicate to the
Transport Airplane Directorate at the above address. All comments must
be marked Docket No. NM413. Comments may be inspected in the Rules
Docket weekdays, except Federal holidays, between 7:30 a.m. and 4 p.m.
FOR FURTHER INFORMATION CONTACT: Will Struck, FAA, Airplane and Flight
Crew Interface Branch, ANM-111, Transport Airplane Directorate, 1601
Lind Avenue, SW., Renton, Washington 98057-3356; telephone (425) 227-
2764; facsimile (425) 227-1149.
SUPPLEMENTARY INFORMATION:
Comments Invited
The FAA invites interested persons to participate in this
rulemaking by submitting written comments, data, or views. The most
helpful comments reference a specific portion of the special
conditions, explain the reason for any recommended change, and include
supporting data. We ask that you send us two copies of written
comments.
We will file in the docket all comments we receive as well as a
report summarizing each substantive public contact with FAA personnel
concerning these proposed special conditions. The docket is available
for public inspection before and after the comment closing date. If you
wish to review the docket in person, go to the address in the ADDRESSES
section of this notice between 7:30 a.m. and 4 p.m., Monday through
Friday, except Federal holidays.
We will consider all comments we receive on or before the closing
date for comments. We will consider comments filed late if it is
possible to do so without incurring expense or delay. We may change the
proposed special conditions based on comments we receive.
If you want the FAA to acknowledge receipt of your comments on this
proposal, include with your comments a pre-addressed, stamped postcard
on which the docket number appears. We will stamp the date on the
postcard and mail it back to you.
Background
On November 4, 2005, The Boeing Company, P.O. Box 3707, Seattle, WA
98124, applied for an amendment to Type Certificate Number A20WE to
include the new Model 747-8 passenger airplane and the new Model 747-8F
freighter airplane. The Model 747-8 and the Model 747-8F are
derivatives of the 747-400 and the 747-400F, respectively. Both the
Model 747-8 and the Model 747-8F are four-engine jet transport
airplanes that will have a maximum takeoff weight of 975,000 pounds and
new General Electric GEnx -2B67 engines. The Model 747-8 will have 2
flight crews and the capacity to carry 660 passengers. The Model 747-8F
will have 2 flight crews and a zero passenger capacity, although Boeing
has submitted a petition for exemption to allow the carriage of
supernumeraries. The maximum takeoff weight will be 975,000 with up to
eight supernumeraries for the 747-8F.
Type Certification Basis
Under the provisions of Title 14, Code of Federal Regulations (14
CFR) 21.17, Boeing must show that the Model 747-8 and 747-8F (hereafter
referred as 747-8/-8F) meet the applicable provisions of part 25, as
amended by Amendments 25-1 through 25-120, except for Sec. Sec.
25.809(a) and 25.812, which will remain at Amendment 25-115. These
regulations will be incorporated into Type Certificate No. A20WE after
type certification approval of the 747-8/-8F.
In addition, the certification basis includes other regulations,
special conditions and exemptions that are not relevant to these
proposed special conditions.
If the Administrator finds that the applicable airworthiness
regulations (i.e., 14 CFR part 25) do not contain adequate or
appropriate safety standards for the 747-8/-8F because of a novel or
unusual design feature, special conditions are prescribed under the
provisions of Sec. 21.16.
In addition to the applicable airworthiness regulations and special
conditions, the 747-8/-8F must comply with the fuel vent and exhaust
emission requirements of 14 CFR part 34 and the noise certification
requirements of 14 CFR part 36.
Special conditions, as defined in Sec. 11.19, are issued under
Sec. 11.38, and become part of the type certification basis under
Sec. 21.101.
Special conditions are initially applicable to the model for which
they are issued. Should the type certificate for that model be amended
later to include any other model that incorporates the same or similar
novel or unusual design feature, or should any other model already
included on the same type certificate be modified to incorporate the
same or similar novel or unusual design feature, the special conditions
would also apply to the other model under Sec. 21.101.
Novel or Unusual Design Features
The Boeing Model 747-8/-8F airplane will incorporate the following
novel or unusual design features: Digital systems architecture composed
of several connected networks. The proposed architecture and network
configuration may be used for, or interfaced with, a diverse set of
functions, including:
1. Flight-safety related control, communication, and navigation
systems (aircraft control domain),
2. Airline business and administrative support (airline information
domain),
3. Passenger information and entertainment systems (passenger
entertainment domain), and
4. The capability to allow access to or by external network
sources.
Discussion
The proposed Model 747-8/-8F architecture and network configuration
may allow increased connectivity to and access from external network
sources and airline operations and maintenance networks to the aircraft
control domain and airline information domain. The aircraft control
domain and airline information domain perform functions required for
the safe operation and maintenance of the airplane. Previously these
domains had very limited connectivity with external network sources.
The architecture and network configuration may allow the
exploitation of network security vulnerabilities resulting in
intentional or unintentional destruction, disruption, degradation, or
exploitation of data, systems, and networks critical to the safety and
maintenance of the airplane.
The existing regulations and guidance material did not anticipate
these types of airplane system architectures. Furthermore, 14 CFR
regulations and current system safety assessment policy and techniques
do not address potential security vulnerabilities, which could be
exploited by unauthorized access to airplane networks, data buses, and
servers. Therefore, these special conditions and a means of compliance
are proposed to ensure that the security (i.e., confidentiality,
integrity, and availability) of airplane systems is not compromised by
unauthorized wired or wireless electronic connections.
[[Page 50928]]
Applicability
As discussed above, these proposed special conditions are
applicable to Boeing Model 747-8/-8F airplanes. Should Boeing apply at
a later date for a change to the type certificate to include another
model incorporating the same novel or unusual design features, these
proposed special conditions would apply to that model as well under the
provisions of Sec. 21.101.
Conclusion
This action affects only certain novel or unusual design features
of the Boeing Model 747-8/-8F airplane. It is not a rule of general
applicability.
List of Subjects in 14 CFR Part 25
Aircraft, Aviation safety, Reporting and recordkeeping
requirements.
The authority citation for these Special Conditions is as follows:
Authority: 49 U.S.C. 106(g), 40113, 44701, 44702, 44704.
The Proposed Special Conditions
Accordingly, the Federal Aviation Administration (FAA) proposes the
following special conditions as part of the type certification basis
for the Boeing Model 747-8/-8F airplane.
1. The applicant must ensure electronic system security protection
for the aircraft control domain and airline information domain from
access by unauthorized sources external to the airplane, including
those possibly caused by maintenance activity.
2. The applicant must ensure that electronic system security
threats from external sources are identified and assessed, and that
effective electronic system security protection strategies are
implemented to protect the airplane from all adverse impacts on safety,
functionality, and continued airworthiness.
Issued in Renton, Washington, on September 23, 2009.
Jeffrey E. Duven,
Acting Manager, Transport Airplane Directorate, Aircraft Certification
Service.
[FR Doc. E9-23753 Filed 10-1-09; 8:45 am]
BILLING CODE 4910-13-P