The historical assumption that physical aircraft skin guarantees software perimeter safety is obsolete. We outline how to implement Zero-Trust principles inside internal ARINC 664 avionics networks.
Instead of trusting any device plugged into the aircraft wiring harness, every LRU must prove its cryptographic identity using mutual TLS 1.3 with hardware-backed certificates before any actuator command is honored.
Segmenting communication links into micro-zones ensures that even if an attacker gains physical access to a maintenance access panel, they cannot traverse lateral network hops into primary flight guidance.