Security Certification and Accreditation analysis for UAS Control and Communications

In this informational paper, we propose the analysis steps required under the National Institute of Standards (NIST) process for information security certification and accreditation (C&A) to enable commercial unmanned air systems (UAS) operations in the National Airspace System (NAS). The initial work performed in RTCA Special Committee (SC) 203 has provided insight into the need to support the identification of the levels of security deemed appropriate to secure the UAS control and communications links (CCLs). Since these first steps in technical need identification, we have progressed to understand the methodology to study and analyze information system security. We are now able to identify the appropriate government standards which can be used to detail the process required to achieve definition of UAS security requirements. The purpose of this paper is to update interested parties on the status of the security analysis activities within SC-203.