Pick a right puppy from a litter, toward a secure controller framework in physical, human and cyber triad

Malicious controllers can possibly manipulate a flight from various channels, e.g. pilots, automation control devices, or cyber remote control. To mitigate potential risks and possible damages, this paper provides the early stage study through proposing a theoretical framework for access control and malicious controller detection in physical, human and cyber triad. Its goal is first to construct an access control mechanism by granting appropriate access right for each controller regarding each control action and more importantly, assign the threshold - the number of controllers from each channel for each control action - to ensure that the control action cannot be executed without sufficient controllers' endorsement. Second, a detailed architecture and data flow between neighbor layers are demonstrated. Third, we try to build a misbehavior identification and reputation index to recognize bad controllers. Our future work is to further profile and model the malicious behaviors which will be justified by well-designed experiments based on critical parameters and metrics for concrete case studies.