Boeing, Shift5 Partner On ANSP Compliance Service

Boeing and Shift5 unveiled a partnership that will see the manufacturer offer the vendor's aircraft network security program (ANSP) compliance software to help operators meet regulatory network-monitoring requirements for connected aircraft, the companies said Feb. 11.

Introduced in March 2023, Shift5's Compliance Module (CM) analyzes aircraft network security log files automatically and flags anomalies. Under the new agreement, Boeing will offer CM, expanding its existing cyber analytics services suite.

ANSPs are required for aircraft that can transfer airworthiness-related data on or off without relying on physical storage media. Among an ANSP's key functions are to aggregate, decode, monitor and alert on potential security conditions in log files. Many operators must do at least part of the work manually.

CM's automated process compiles and analyzes logs, flagging potential problems it detects. The issues are prioritized using CM's machine learning models, which are based on the MITRE ATT&CK framework.

The process, which uses existing data offloading methods and is customizable with operator- or manufacturer-specific parameters, helps stakeholders meet ANSP requirements, such as those outlined in FAA Advisory Circular 119-1A and similar European Union Aviation Safety Agency (EASA) standards.

ANSP compliance is required for many current-generation designs as well as many aircraft fitted with post-delivery modifications.

“These next-gen aircraft usher in evolving cybersecurity requirements, including ANSP compliance—a regulation that’s notoriously difficult to navigate,” Shift5 CEO and co-founder Josh Lospinoso said Feb. 11. “Together, Boeing and Shift5 will flip the script, turning the challenges of ANSP compliance into a checklist item. This is a game-changer for operators as FAA, EASA, and other regulatory requirements evolve and airlines face persisting staffing shortages. We’re going to save operators a ton of time, effort, and paperwork.”

Shift5 touts CM as “the only original equipment manufacturer agnostic platform” that automatically captures and analyzes core network security log files. Besides the new Boeing partnership, CM has been adopted by a major U.S. carrier, Shift 5 says.